Free Store
Get started

The Evidence Spine

Evidence is not a report you generate later. It is produced as the action happens.

Quox is the self-hosted control plane for AI agents: give agents real access to your systems while you control what they can do, approve what matters, and keep independently verifiable evidence of every governed action. That evidence is not bolted on afterwards. It is produced by default, as part of the action itself.

Evidence by default

Every governed action an agent takes emits an event as it happens, not as a log line reconstructed later. This matters because a report generated after the fact can only ever be as honest as the system that wrote it; an event emitted at the moment of action, and then chained and witnessed, cannot be edited without the tampering being detectable.

WARD: tamper-evident receipts

WARD is the meta-chain that witnesses everything else. It produces tamper-evident receipts: hash-chain entries that reference an event by ID and payload hash, but never store the event's content. That content-free design means a WARD receipt proves an event happened and has not been altered, without becoming a second copy of sensitive data to secure.

WARD witnesses events from all of the other protocols: AEE messages, AOCL decisions, and VOLT evidence records, so no single chain has to be trusted on its own.

AOCL: the policy layer

AOCL is the layer model an agent request passes through end to end. Layer 3, POLICY, is where safety and authorization checks happen before an agent is allowed to act. Because every layer in the stack emits an observable event, a POLICY decision is not a black box: you can see what was checked, what was allowed, and what was blocked, for every request.

Where this goes next