Skip to content
Demo
DemoSample data — nothing here is real; refresh to reset.
Book a demo →
2FLIGHT RECORDERusage_event · keyset-paged · append-only, update/delete/truncate rejected by triggerTAIL FOLLOWING--:--:--
CHAIN INTACT — 10,291 ROWS VERIFIEDgenesis 2026-06-23 00:00:07 · head sha256:897f0125… · last verify 14:07:31 ET · 212ms
Demosandbox only — alter a historical row to prove the chain catches it. Not a production control.
Principal*
Model*
Action
Path
Since24H
10,291 rows · newest first · cursor seq<10,292
SeqTime ETPrincipalModelTok InTok OutCost USDLatActionRow Hash
10,29014:06:44.805followup-botclaude-haiku-4-500$0.0000003msblock_revoked71e00b88ceac

Metadata envelope · row 10,290

event_id
evt_71e00b88ceac41c75ea9
ts
2026-07-06T14:06:44.805-04:00
tenant
t_acme_01
principal
followup-bot · owner dana@acme.example
provider
anthropic · POST /v1/messages
model
claude-haiku-4-5-20251001
tokens
0 in / 0 out · never reached provider
cost
$0.000000
policy
block_revoked → HTTP 403
cause
principal revoked 13:42:08 by dana@acme.example · 67th block since kill

Chain link · tamper-evident

prev_hash 10,289
sha256:c5e77c52de3c58b59f21f11fe5049b51d8e3ae06e49e5e17eaddf05c2690c517
└─> feeds ─>
row_hash 10,290
sha256:71e00b88ceac41c75ea9aaa218943cabe0cccbd64c85871ee74386af0cd644b0
row_hash = sha256( prev_hash ∥ canonical(event) ) — edit any historical row and every hash after it breaks. Postgres triggers reject UPDATE / DELETE / TRUNCATE outright.

NO BODY STOREDprompt + completion stayed in your data plane. this row is metadata — enough to testify, nothing to leak.

10,19213:42:08.000■ PRINCIPAL REVOKED — followup-bot · by dana@acme.example · reason: runaway retry loop — 4th follow-up drafted against a 3-send cap · propagated in 0.4s · the kill is itself a chained row
F9 verify · open envelope · / filter · G jump to seqshowing 10,19010,291 · older ➜ cursor seq<10,190 · retention: 7 years

Command Palette

Search for a command to run...