Roadmap

Built, building, and planned.

The trust and compliance infrastructure for autonomous AI. Here is what we have built and where we are going.

AGENT IDENTITY

  • Agent registration and verified identityShipped
  • Verifiable agent ID on SolanaShipped
  • Self-custody. You hold the keys. Gas is covered.Shipped
  • Behavior profiles and enforcementShipped
  • Safety packages (HIPAA, SOC2, PII, Prompt Defense)Shipped
  • Trust scoring system (0 to 1000, 4 trust tiers)Shipped
  • Reputation decay and behavioral driftShipped
  • Cross-vendor agent trust verificationNext
  • Unregistered agent scannerNext

MONITORING AND ENFORCEMENT

  • Real-time prompt injection detectionShipped
  • Spend tracking and budget limitsShipped
  • Email alerts and webhook systemShipped
  • Audit log with CSV and JSON exportShipped
  • Ed25519 signed audit exportsShipped
  • Rate limiting enforcementShipped
  • Off-limits actions enforcementShipped
  • Response monitoring, output safety and PII detectionShipped
  • MCP threat scannerShipped
  • Tiered on-chain authorization (low, medium, high stakes)Next

COMPLIANCE

  • On-chain program upgrades require multisig approval; no single person can change the deployed programNext
  • Regulator-ready signed exportsNext
  • SSO: built on request. Talk to us.
LEGAL
  • EU AI Act Article 50 transparency (in force) and Article 12 logging (high-risk from 2 December 2027)Shipped
  • Regulatory framework mapping per agent actionShipped
  • Merkle anchoring to Solana, with per-event proof of inclusion in the on-chain root. Daily is included on paid accounts. Hourly, every 5 minutes, and real-time are options.Shipped
  • Ed25519 signed audit exportsShipped
  • Cal. Civ. Code § 1714.46 (AB 316, Stats. 2025, ch. 672): autonomy is not a defenseShipped
  • ABA Model Rules 1.1, 1.6, 5.1, 5.3 and Formal Opinion 512 (2024)Shipped
  • Court AI Disclosure: 22 NYCRR Part 161 and FRCP 11(b)Shipped
  • eDiscovery TAR: FRCP 26 and 34; Sedona Principles 2 and 6Shipped
  • UK DRCF: The Future of Agentic AI (31 March 2026) is guidance-only and is not a binding ruleShipped
  • ISO 42001 control mappingShipped
  • Matter-level access isolation proof (ABA Model Rules 1.6, 1.9, 1.10; Formal Opinion 512 is ethics guidance, not a statute)Shipped
  • State AI disclosure patchwork (Colorado, California, Texas, Illinois, New York). Colorado C.R.S. § 6-1-1704 and N.Y. Gen. Bus. Law § 1421 effective 1 January 2027, not yet in forceShipped
HEALTHCARE
  • HIPAA compliance PDF reportShipped
  • SOC2 compliance PDF reportShipped
  • EU AI Act Article 50 transparency (in force) and Article 12 logging (high-risk from 2 December 2027)Shipped
  • Regulatory framework mapping per agent actionShipped
  • Merkle anchoring to Solana, with per-event proof of inclusion in the on-chain root. Daily is included on paid accounts. Hourly, every 5 minutes, and real-time are options.Shipped
  • Ed25519 signed audit exportsShipped
  • Per-agent PHI access documentation (HIPAA minimum necessary standard)Shipped
  • HHS OCR Phase 3 audit-ready risk assessment packageShipped
  • EU AI Act Annex III high-risk system documentation (from 2 December 2027)Shipped
  • Business Associate Agreement compliance evidenceShipped
  • CMS prior authorization decision audit trailShipped
  • HIPAA Security Rule update (NPRM 6 January 2025; not yet a final rule): encryption of all ePHI, MFA, continuous monitoring, removal of addressable versus requiredShipped
FINANCE
  • SOC2 compliance PDF reportShipped
  • SR 11-7 compliance PDF reportShipped
  • EU AI Act Article 50 transparency (in force) and Article 12 logging (high-risk from 2 December 2027)Shipped
  • Regulatory framework mapping per agent actionShipped
  • Merkle anchoring to Solana, with per-event proof of inclusion in the on-chain root. Daily is included on paid accounts. Hourly, every 5 minutes, and real-time are options.Shipped
  • Ed25519 signed audit exportsShipped
  • SOX 302 and 906 financial close audit trail with human authorizer attributionShipped
  • FINRA Rule 4511 auditable recordsShipped
  • AML and FinCEN decision audit trailShipped
  • NYDFS Part 500 compliance reportShipped
  • SEC Rule 17a-4 tamper-evident recordsShipped
  • OCC third-party risk call chain documentationShipped
  • SR 26-2 model risk documentation packageShipped
  • US Treasury FS AI RMF control mappingShipped
  • DORA operational resilience documentation for EU deploymentsShipped
  • PCAOB audit evidence chain documentationShipped
INSURANCE
  • SOC2 compliance PDF reportShipped
  • EU AI Act Article 50 transparency (in force) and Article 12 logging (high-risk from 2 December 2027)Shipped
  • Regulatory framework mapping per agent actionShipped
  • Merkle anchoring to Solana, with per-event proof of inclusion in the on-chain root. Daily is included on paid accounts. Hourly, every 5 minutes, and real-time are options.Shipped
  • Ed25519 signed audit exportsShipped
  • NAIC model bulletin per-agent underwriting decision documentationShipped
  • Colorado ADMT Law (SB 26-189, effective 1 January 2027). SB 24-205 was repealed and never took effectShipped
  • NYDFS Part 500 compliance reportShipped
  • State insurance commissioner examination documentation per agentShipped
  • EU Solvency II operational risk documentationShipped
  • UK FCA operational resilience documentationShipped
  • Cyber insurance agent registry reportShipped

THE NETWORK

  • Decentralized agent training networkPlanned
  • Federated learning across agent categoriesPlanned
  • $CPRX token layerPlanned
  • Cross-organization agent reputationPlanned
  • Industry-specific agent intelligence poolsPlanned

Building something that needs trust infrastructure?

Ship trust infrastructure before the August 2026 EU AI Act deadline.

Let's talk.
Message the founder