An auditor asks what your AI did last Tuesday. You send one sealed file. They check it on their own computer, for free, and if anyone changed a word, the check points to it.
The chain
A sealed record is a run written as a chain. Each step is locked to the one before it, so a change anywhere shows at the exact step, and every step after it stops matching.
The check, on a loop: find the changed mark, name it, show the chain as sealed.
A run of 240 steps, one dot each, every one sealed onto the one before it.
A drawing of the rule, not a record. The real check runs on a real record further down.
The question
An auditor, a regulator, an insurer, opposing counsel. Each of them wants to see what the agent did, and the tools watching your agents keep that story in their own systems and ask to be believed.
A sealed record lets the person asking check it for themselves, on their own machine, with a checker they run or write from the published format. Nobody has to take your word for it, or ours.
The four checks
01 · Before it runs
Before the agent runs, shows you which of its add-ons and instructions could reach your secrets, send data out, delete files or override its orders, each with the line that says so. It reads them and never runs them.
Its receipt proves the review ran on those exact bytes.
Scan the Instruction Layer →
02 · While it works
Every step of the run lands in one sealed file, each step locked to the one before it. Alter any part afterwards and the check fails at the step that changed.
Proves the record is unchanged since it was sealed.
See a Sealed Run →
03 · After it finishes
Takes a claim the agent made, like “the tests pass”, and tries to break it. The verdict comes from checks that ran, never from the agent’s say-so.
The verdict holds for the evidence captured at that moment.
Break a Claim →
04 · When someone asks
Maps what the first three left behind onto your control framework and tells you, control by control, what exists and what is missing. Every line is cited by file, digest and field.
Evidence you assembled; the audit opinion and any cover stay with your auditor and insurer.
Assemble a Pack →The foundation
All four write the same record and seal it the same way, so the files work together and nothing you keep is locked to us. See how it is built →
Before the price
Six words are banned in our code and checked on every commit. If your job is to find the overclaim, here it is first, at full size, above the money.
Changes show up
not unchangeable
Anyone can edit the file. What they cannot do is edit it without the edit becoming obvious to the next person who checks.
Signed by that key
not a trustworthy run
The signature proves which key sealed it. Whether the key’s owner is honest, and whether the work was any good, are different questions.
Scanned for signals
not certified clean
A scan reports the patterns its rules match, with the file and line. Nothing matching is not the same as nothing there.
Complete as captured
not all-seeing
The agent cannot quietly drop a step, because it is not the one writing them down. But nothing can record what the system running it never saw.
Try it
This sealed record is real: an AI adding a limit to a payments API, five steps long. Press Check It and your browser checks every step and the seal, right here.
Then press Tamper With It. One word changes, and the check stops at the step that changed. Every part of Rotairo hands you a file you can question the same way.
sample-record.json · sealed 2026-08-11 09:19:05Z
Press Check It to run the check on the record above.
The in-page checker needs JavaScript. The command-line checker does not, and everything else on this page reads without scripts.
Who asks
Each already asks the same thing in its own words: a lasting record of what the machine did, that someone outside your company can review.
Applies · 2 Dec 2027
Automatic event logs, kept at least six months, for high-risk AI systems.
In force
Records preserved so they cannot be rewritten or erased.
Ongoing
SOC 2 auditors now ask how automated actions are evidenced.
The technical detail
The stack, the standards it uses and what each part gives you, on one page. Whoever reviews this for you can check every claim on this site without asking us anything.
Pricing
Every tool in the stack runs free. You pay when you want the records stored and timestamped, identities issued, or someone standing in front of your auditor with you.
Verifier
$0
Permanently, with no time limit.
Team
$49 / month
Opening soon. One workspace with five agents, then $10 a month for each agent after that.
Compliance
From $25,000 / year
Start with a 60-day evaluation for $5,000, credited to your first year. Design partners pay $15,000 for year one with three seats, then renew at list.
The rule we will not break
Checking a record never costs money. The moment the check sits behind a subscription, “you do not have to trust the issuer” becomes something you buy from the issuer, and the reason to hold a sealed record is gone.
Tomorrow’s run can leave a record anyone can check. Break the sample first.
