DEV Community

rambo
rambo

Posted on Edited on

verifiable receipts: the missing layer for ai agents

verifiable receipts: the missing layer for ai agents

every ai agent framework ships with logging. none of them ship with proof.

your agent runs a workflow, touches five tools, moves data between systems, and tells you it worked. what you get is a transcript, a log file, and a hope.

a verifiable receipt is the missing layer. it is a tamper-evident record of one unit of ai work, captured at execution time by the execution layer, not reported after the fact by the agent.

receipts are the atoms. a run of ten tool calls produces ten receipts, chained in order. this is what "receipt driven ai agents" actually means: every unit of work leaves a checkable artifact.

the format is defined by aer-1, an open internet-draft: https://datatracker.ietf.org/doc/draft-zambo-aer1/26/

it is a draft, not a finalized standard. the reference implementation is on gitlab: https://gitlab.com/rambozambodotdev/zambo

for agents, the integration point is mcp at https://zambo.dev/mcp . an agent calls a tool through the zambo mcp server, the execution layer captures the receipt automatically.

this changes multi-agent workflows. when agent a hands off to agent b, b verifies a's receipts before proceeding. trust moves from the agent to the math. formal handoffs are now supported too: the receiving agent records its acceptance with the handover_accept tool, so the handoff itself becomes part of the verifiable record.

note what the receipt does not claim. it does not prove the answer was correct. it does not prove the real-world event happened. it proves the record is intact.

if you are building agents, stop shipping workflows without a receipt layer. the mcp server is at https://zambo.dev/mcp . the spec is at https://datatracker.ietf.org/doc/draft-zambo-aer1/26/ . the code is at https://gitlab.com/rambozambodotdev/zambo .

get it running: https://zambo.dev/install/

an agent receipt is a record of one ai agent tool call that anyone can check: it keeps the exact saved bytes and their sha-256 digest, and it proves the result was not changed since it was saved, not that it was right.

Your AI said "done." For $0.99, prove it: https://zambo.dev/day-pass/

Top comments (0)