Your AI Thinks. Decides. Acts.
Capsules Prove It.
A Capsule is a cryptographically sealed record of an AI decision — what triggered it, how it reasoned, who approved it, what happened, and the result. Six sections. One truth. Tamper-evident forever.
"Generate the Q4 revenue report with charts"
a7f3c2e9b1d4...Your AI Makes Thousands of Decisions.
Can You Prove Any of Them?
Logs tell you what. Capsules prove what, why, who approved, and what resulted — with cryptographic signatures a court would accept.
Editable. Deletable. No proof of authenticity.
You know what happened, not why.
Anyone could have inserted or removed entries.
One quantum computer breaks everything.
SHA3-256 hash + Ed25519 signature. Tamper = detected.
Options considered, why it chose, confidence score.
Each capsule links to the previous. Insert or delete = chain breaks.
Ed25519 + ML-DSA-65. Survives quantum computers.
chain.verify() → ✓Create. Seal. Prove.
No configuration. No database setup. No key ceremony. Create a Capsule, seal it, and you have a cryptographically signed audit record.
Every Capsule Links to the Last.
Tamper With One, Break the Chain.
Each capsule contains the SHA3-256 hash of the previous capsule. Insert, remove, or modify any record and the chain breaks — instantly, detectably, irrefutably.
One Spec. Any Language.
Identical Hashes. Everywhere.
The Capsule Protocol Specification (CPS v1.0) defines byte-level serialization so any conformant implementation — in any language — produces identical hashes for identical capsules. Pass the 16 golden test vectors, and you're compatible with every other implementation.
Dual Cryptographic Signatures.
Today's Security. Tomorrow's Threats.
Every sealed Capsule carries two signatures: Ed25519 for proven classical security, and ML-DSA-65 (FIPS 204) for post-quantum protection. Belt, suspenders, and a spare.
Ed25519
Classical Security
ML-DSA-65
Post-Quantum Security
Why both?
Classical signatures protect you today. Post-quantum signatures protect records sealed today against the computers of 2030. A Capsule sealed in 2026 must still verify in 2036, even if a large quantum computer arrives in between.
Two Dependencies. That's It.
SHA3-256 hashing comes from Python's standard library. We only pull in what stdlib doesn't have: signatures and async storage.
PyNaCl
Ed25519 digital signatures. Every Capsule is signed with a key that's auto-generated and stored with owner-only permissions. Same algorithm SSH, Signal, and Tor rely on.
- Ed25519 key generation
- Digital signatures
- Signature verification
aiosqlite
Capsule storage with zero setup. No database server, no connection string, no migrations. A single file on disk. Upgrade to PostgreSQL when you outgrow it.
- Async capsule persistence
- Chain ordering and retrieval
- Zero-config storage
Everything else comes from Python's standard library:
The smaller the supply chain, the harder it is to compromise. That matters when you're sealing records a regulator will read in 2036.
Regulations Demand Proof.
Capsules Deliver It.
The EU AI Act takes effect August 2026. It mandates tamper-evident logging but provides no technical spec. Capsules fill that gap.
EU AI Act
Article 12Automatic, tamper-evident event logging for high-risk AI systems
Cryptographic hash chain with dual signatures — tamper = detected instantly
SOC 2 Type II
CC7.2 / CC8.1Monitor system components for anomalies; controlled change management
Every AI action recorded with reasoning, authority chain, and outcome
HIPAA
§164.312(b)Audit controls for information systems with ePHI
Three privacy layers: public metadata, restricted reasoning, sealed PII
NIST AI RMF
MAP / GOVERNDocument AI system decisions and maintain accountability
Six-section structure maps directly to NIST accountability requirements
What a Capsule Actually Looks Like
No abstraction. No marketing. This is the actual JSON structure that gets hashed, signed, and chained — every field, every decision.
1{2 "id": "d4e5f6a7-8b9c-4d0e-1f2a-3b4c5d6e7f80",3 "type": "agent",4 "domain": "agents",5 "parent_id": null,6 "sequence": 4291,7 "previous_hash": "c9e5f102b8a7d6e5f4c3b2a1...",89 "trigger": {10 "type": "user_request",11 "source": "api/v1/chat",12 "timestamp": "2026-03-05T14:32:01+00:00",13 "request": "Generate the Q4 revenue report with charts",14 "correlation_id": "corr_7x8y9z",15 "user_id": "usr_8f3a2b"16 },1718 "context": {19 "agent_id": "conductor",20 "session_id": "sess_a1b2c3d4",21 "environment": {22 "model": "llama-3.1-70b",Built For People Who Need Proof
AI Engineers
Building agents that make real decisions. You need proof of what they chose and why — before they acted.
Regulated Industries
Healthcare, finance, legal. When auditors ask 'prove it,' capsules are the answer.
Security Teams
Post-quantum dual signatures. Air-gap deployment. Kill switch. Tamper-evident records.
Startups
Ship fast now, prove trustworthiness later. The capsule chain is your compliance foundation from day one.
Compliance Officers
EU AI Act, SOC 2, HIPAA, NIST — capsules map directly to what regulations require.
Open Source Contributors
Python and TypeScript reference implementations. 16 golden test fixtures. Build a conformant SDK in your language.
Your AI Decides.
Capsules Prove It.
Six sections. Cryptographic seal. Hash chain. Every decision your AI makes — recorded, signed, and provable forever.