FRESH

Hacker News

Show HN: Halo – open-source, tamper-evident runtime evidence for AI agents

37 points by brian_kuan

by derdi

2 subcomments

> Disclaimer: this proves integrity, not completeness (as a self-held chain proves nothing was edited but does NOT prove that nothing was omitted).
Or as the page puts it in more detail:
> A self-held chain proves integrity: nothing was edited or reordered after the fact. It cannot prove completeness: the operator of a recorder can delete the bad day and re-seal the chain, or never write a record at all, and the chain stays internally consistent.
I don't get this. If I "hold" the "chain" (I hate the jargon agents invent), why can't I edit or reorder and then "re-seal" it?

by brian_kuan

0 subcomment

PS: please try to break it - if you find that the report does not catch a deleted line, changed number, or modified record, I'd love to know!
And to start a discussion: if you sell or buy AI agent products, what do security reviews ask about them?

by mdellison

1 subcomments

I've been working in the same lane. The vendor uses the same technique that academic preregistration uses in experiments. No audit firm/institution/organization needed. The customer just compares what was delivered against what was pre-committed. This way if something is off, it doesn't just show up as nothing... it shows up as a gap.

by all2

1 subcomments

I'm currently working on an agent framework that has auditability as one of its core promises. I'm glad to see others are working in this domain!
I've seen other products/apps in this space farther up the stack at the API boundary.
What frameworks does your package work with? How does it handle intercept?

by ambicapter

1 subcomments

> may have built observability dashboards and audit logs, but those are editable and partisan
Why would these be editable?

by rmonvfer

2 subcomments

by solarkraft

1 subcomments

by gawkdev

1 subcomments

are you thinking co signing to a third party or something like a transparency log style?

by nf-x

1 subcomments

Looks very slop, but it’s a good idea. The main difficulty is that no big name is hosting a witness.

by madikz

0 subcomment

0 subcomment