An agent approves an invoice. The approval is a signed receipt.
Every action an AI agent takes becomes a receipt: the intent, the policy that applied, a hash of the result, two signatures. Anyone can check it offline, without asking us.
An order crosses a jammed link. The drone still proves what it did.
Signed orders, bounded autonomy when the link is denied, firmware checked before it is flashed, and an after-action record a coalition partner can verify.
A rover acts twenty light-minutes from Earth, inside signed bounds.
The plan travels once, as signed intents. Every autonomous decision is receipted and sealed through months of blackout, then forwarded home intact.
Commands checked on board. Logs verified on the ground.
Post-quantum trust for spacecraft that fly for twenty years. Flight software for a hosted run on an operating satellite is built and founder-approved after five dated review rounds across two model families (records held internally); the orbital test is planned.
A controller older than the cloud moves to post-quantum keys.
A gateway carries identity and signed firmware for devices that cannot change, and every migration step leaves evidence that lasts as long as the plant.
Five worlds. One receipt format. Three verifiers, one verdict.
JavaScript, Python and Go verifiers must agree on every case. One difference is a defect. That is the standard every programme is held to.