AI agents that show their work.

Three reasons this matters now.

1. Agents need a record.

   An agent with access to servers can change them. A company letting one do that needs to know what it proposed, who approved it and what ran, and needs to prove it later.

2. The record should be open.

   Quox’s evidence formats are four open specifications, each filed as a live IETF Internet-Draft, so a record can be checked without trusting Quox. An Internet-Draft is a published proposal, not a standard.

3. Free core, paid add-ons.

   The core is free to self-host under the Quox Community Source Licence 1.0, which protects it from resale as a competing hosted service. The business is built on paid add-ons, managed hosting, white-label agreements and support.

Four open specifications, checkable today.

Published under the Apache 2.0 licence. All 4 are live IETF Internet-Drafts until 4 Mar 2027.

• AEEAgent Envelope Exchange

  One envelope format for every message an agent sends or receives.

  DocsIETF draftGitHub

• AOCLAgent Orchestration Control Layers

  The control layers a governed agent action passes through, from policy to observation.

  DocsIETF draftGitHub

• VOLTVerifiable Operations Ledger and Trace

  Evidence bundles for a run, which anyone can download and verify.

  DocsIETF draftGitHub

• WARDWrite-once Append-only Receipt Digests

  An append-only receipt chain: change an old entry and every later hash breaks.

  DocsIETF draftGitHub

Quox also runs on itself in public: two operations canaries publish a signed, RFC-3161 countersigned checkpoint every day, failures included. See the evidence. The protocols are explained for a general reader on the governance page.

Shipping, day by day.

Every square is a real day of commits to this website’s own repository, 26 Jan 2026 to 29 Oct 2026: 3,050 commits on 179 days. The repository is private; the data room can show it.