Evidence of agentic work, one action at a time.
On instrumented paths, each observed action can produce one durable piece of tamper-evident evidence, a receipt recording what the agent did, the purpose it was measured against, the review read, and a commitment to the exact parameters without echoing them. A receipt is an evidence record, not a legal guarantee. It does not ask you to trust the agent; it gives your team something to review.
A real receipt, from a fixed test fixture.
A real telos-receipt v0.1 output, minted from a fixed synthetic fixture and verified offline before publication. It shows the standalone receipt contract; it is not client work, and its own engine field says no governance engine was wired to it. The stronger evidence is an internal TELOS run, our framework observing our own agent, on The run. Download the raw JSON.
sample-receipt.json · telos/0.1-unsigned
What a hash match shows
The payload matches the recorded integrity hash. If anyone altered the read, the scores, or any payload field after the receipt was written, the recomputed hash will not match.
What it does not show
Who issued the receipt, or when. The hash is key-free, so authorship and time need a signature these standalone samples declare they do not carry. And a clean receipt can faithfully record a decision that was in scope but still wrong: evidence of how the work happened, not a verdict on whether it was wise.
Three reads. Nothing is blocked by any of them.
The read set is public: the shape of every note a review can record. Every read is a note to the human.
Raw schema value, shown publicly as "within purpose". The action sat close to the declared purpose. Noted, and the work went on.
Shown publicly as "question raised for review". Ambiguous against the purpose; the record carries a question for the human.
Shown publicly as "surfaced for human review". The read routes to a person, and the human decision becomes part of the record.
Signing status, object by object
- TodayThis standalone sample: unsigned integrity hash, by design, declared on itself.
- TodayThe benchmark evidence capsule: demonstration-key signatures plus an independent timestamp. Consistency, not production identity.
- TodayBrowser verification for the sample and the capsule chain.
- ComingProduction receipt signing: a production signature fills the reserved field, no schema break.