Agent Evidence Recorder

Audit-ready evidence layer for AI agent runs. Turns every critical agent action (model call, tool call, human approval, redaction, error, output) into a redacted, hash-anchored audit packet.

Scope of those words: redaction covers the patterns and secret-named fields AER recognises, not all personal data; the hash chain proves internal consistency, not resistance to an operator who rewrites the database (no external seal yet). Details: docs/hardening/.

For document-grounded assistants, a run can link to the previous turn and an event can record the context used, the retrieved candidates and the cited sources (with version and content hash). This records what the application reported; it does not show that a source is correct, current or legally applicable, and it is not a record of the model's internal reasoning.

Sealing a run returns a receipt (optionally Ed25519-signed). Exported JSON packets can be checked offline with @ktlsr/aer-verify — no network, no AER account. Without a receipt you kept or a key you trust, a passing check means "internally consistent", not "unaltered since sealing": there is no independent external timestamp or seal service yet.

Agents can request a verified human approval for an action; only a signed-in user of the workspace can approve it in the dashboard, and the agent consumes it with the exact parameters right before acting. AER records and checks this, but it does not block an action whose code skips the check.

Not an observability tool. See docs/PRODUCT.md for positioning.

Repo Layout

apps/web              Next.js (App Router) + TS strict + Tailwind + shadcn/ui + Prisma
packages/collector-js Collector SDK (startRun / run.event / run.complete)
packages/demo-agent   Customer Data Deletion demo agent
docs/                 PRODUCT.md (product positioning)

Prerequisites

• Node.js >= 20, pnpm 10+
• PostgreSQL (local, Docker, or hosted) — set DATABASE_URL in apps/web/.env

Commands

pnpm install                 # install all workspaces
pnpm dev                     # run apps/web (http://localhost:3000)
pnpm build                   # build apps/web
pnpm lint                    # lint apps/web
pnpm db:migrate              # prisma migrate dev (apps/web)
pnpm db:seed                 # seed one demo run (apps/web)
pnpm demo                    # run the demo agent end-to-end

Docs

Positioning and product direction: docs/PRODUCT.md.

The remaining documents (spec, data model, API contract, security notes, agent roles, build runbook, design system) are internal and deliberately kept out of this repository, so they are not linked here.