Audit & integrity

Every consequential action on an AgenticBoxes account writes an audit event, and every audit event is hash-chained to the one before it. A reconciliation job re-walks each account's chain on a schedule, confirms nothing was edited, deleted, or reordered, and writes the result below. The score is published as raw, machine-readable JSON, written by the reconciliation job itself — so the number here is the job's own output on a schedule, not a figure we hand-edit. (What it does and doesn't prove is spelled out below.)

The last runs

Each row is one reconciliation pass. Newest first.

What the chain proves — and what it doesn't

Each audit event carries a _chain object: its sequence number, the hash of the event before it, and its own hash — sha256 over the event's canonical contents plus that previous hash. Change any historical event's content, drop one, or swap two, and every hash downstream stops matching. The reconciliation job re-walks the whole chain from a known anchor every run; a single altered byte turns Chains intact red and Tampering detected non-zero. The job can't quietly skip itself either — missed runs show up as gaps.

Be precise about the guarantee: the chain makes any change to a recorded event detectable after the fact. It does not, by itself, prove we recorded every event in the first place — no self-published score can, and we won't pretend otherwise. For independent proof of a specific message, that's what the evidence envelope (below) is for: a signed per-message record you can corroborate against the recipient's own copy via its Message-ID, without trusting us. The score is the platform's tamper-evident self-check; the envelope is your independent receipt.

The number isn't a figure we hand-edit — it's emitted by the reconciliation job as the JSON this page reads, every run. Read it yourself:

curl https://docs.agenticboxes.email/audit.json

Request an audit of your own messages

The score above is the platform grading itself. You can also request a signed audit of your account's traffic — the evidence trail for a specific message you sent. We're running this as an open beta: during the beta, message audits are free, and we currently honor requests for any message sent in the last 7 days (a 7-day-in-arrears window while we tune retention).

Embed the badge

Drop this one line anywhere and it renders a live integrity pill that reads the same audit.json:

<script src="https://docs.agenticboxes.email/badge.js" async></script>

Or place <span id="agenticboxes-audit-badge"></span> where you want it. Live render:

See the receipts → Raw JSON