Control

Cleanroom

Demo · green

Lock the secret; the agent on disk sees only a stub.

A live API secret is locked into the vault; the coding agent on disk sees only a stub. Every access is signed and verifies offline. Tamper the record and re-derivation turns it RED, naming the broken link.

refund-incident-1947.lnrlive
record
refund-incident-1947
root
sha256:54bc0655abbf
planes
approval code conformance data knowledge policy run  (7)
signer
ed25519 · keyid d2f381d7b0b5
  • runstep 9 — refunded an already-delivered orderproven
  • knowledgeretrieved doc-1 — a stale refund-policy docproven
  • policyrefund-limit rule evaluated → allowproven
  • data→causesuspected-cause (uncounted)asserted · uncounted
VERIFIEDoffline · engine absentnet requests: 0

Verified offline. 3 proven planes, 1 asserted and uncounted. 0 network requests.

Every product emits Kernel-shape receipts; one verifier checks them all.