The EU AI Act conformity-evidence layer for autonomous AI agents.
Case file · 2025 → 2026
Three signals from the last year, each a record that could not be produced or trusted after the fact.
01
Jul 2025Action without a provable record· Fortune
An autonomous coding agent deleted a production database of 1,206 executive records during an explicit code freeze, fabricated records, and misreported the rollback.
02
Jun 2025Indirect prompt injection· CVE-2025-32711
The first zero-click prompt-injection flaw in a major AI assistant exfiltrated sensitive data with no user action and no tamper-evident trail.
03
Mar 2026No attribution, no evidence· CSA / Aembit
68% of organizations cannot distinguish human activity from AI-agent actions in their own systems.
The blocker is not the AI. It is the lack of verifiable evidence.
docker pull ghcr.io/edoardobambini/iaga-sentinel:v1.8.1No Rust toolchain, demo data pre-seeded.
Three things in one binary. The verdict stays deterministic and reproducible; models produce scores the policy reads, never the decision.
Dictum, a typed policy DSL with a Hindley-Milner type checker, makes every allow, review, or block decision. Deterministic, reproducible, replay-safe.
$iaga policy check no_pii_egress.dictum
Each verdict becomes an Ed25519-signed receipt linked to the previous one in a hash-chained append-log, per run. Replay re-verifies the whole signed chain, and can re-run captured runs to surface policy drift.
$iaga replay <run_id> --verify-only
A standalone iaga-verify binary replays and verifies the whole chain against one public key. No database, no server, no call-home. The proof does not depend on us.
$iaga-verify run.json --key <hex>
Others hold pieces of the chain. No one holds all of it at once.
The defensible position is the intersection: runtime cryptographic proof, offline-verifiable, and EU-sovereign today, with eIDAS-qualified signatures and a packaged Annex IV dossier on the Enterprise roadmap. Evidence that is cryptographic, not testimonial.
Proof and offline verification are live today; eIDAS and the Annex IV dossier are Enterprise roadmap. Live vs roadmap
Built for banks, insurers, healthcare, and the public sector. We are building IAGA Sentinel Enterprise to turn the open-build mechanisms into the dossiers, dashboards, and qualified signatures the EU AI Act, GDPR, and DORA ask for, in a separate commercial repository. It is not on sale yet. Leave your email to follow the build and be first in line when early access opens.
Leave your email and we will keep you posted on Enterprise milestones and reach out as early access opens. No sales pitch, unsubscribe anytime.
Generated from the signed chain. Proof is live today; the dossier generator and qualified signatures are Enterprise roadmap.