BLACKBOX seals every reasoning step, tool call, and output into a cryptographic hash chain. Any post-hoc alteration breaks. Detectably, permanently, without trusting us. One command from an auditor's laptop verifies everything.
These incidents already happened at companies that had application logs, not audit chains.
hash = sha256(prev_hash + canonical_json(event))Every event commits to all prior events. Alter a single byte of a system prompt, a reasoning step, a token count. Every downstream hash changes. The chain breaks at that point. Verifiable in O(n) with stdlib sha256 only. No BLACKBOX infrastructure required.
POST /v1/events or uses the SDK. The server assigns sequence, computes prev_hash, and seals the event. Append-only: there is no UPDATE or DELETE path for events. Ever.hash = sha256(prev_hash + canonical_json(event_without_hash)). Genesis uses prev_hash = "GENESIS". Each event's hash is a commitment to every event that came before it. One tampered byte breaks the chain from that point forward.GET /v1/audit/{run_id} returns a public certificate. No auth, share with any auditor or regulator. Chain validity is recomputed on read. No stored result to falsify. The math is the guarantee.import blackbox_sdk as bb
bb.configure(api_url="https://blackbox-gold.vercel.app")
with bb.run(
"agent_001",
model="claude-sonnet-4-6",
system_prompt=SYSTEM_PROMPT,
tools=["web_search", "calculator"],
sampling={"temperature": 0.3},
) as run:
run.reasoning("Planning next step")
run.tool_call("web_search",
inputs={"query": "Q3 revenue"}, result=hits)
run.output(
"The Q3 revenue was $4.2M",
tokens_in=520, tokens_out=180,
cost_usd=0.0042, latency_ms=1340,
)
# ↑ Sealed automatically. Chain is provable.run.reasoning(), run.tool_call(), run.output().bb.instrument() patches openai + anthropic at startup. Zero agent code changes. Every LLM call is auto-recorded.Install the SDK, record your first run, and produce a cryptographic audit certificate. in the time it takes to read this page.
pip install blackbox-sdk. Zero external dependencies, stdlib urllib only.bb.configure(api_url="..."). No API key needed to start.GET /v1/audit/{run_id} returns a public certificate. Recompute with stdlib sha256 to prove it.sha256 and canonical JSON. Zero BLACKBOX infrastructure. One Python function, 12 lines, stdlib only./v1/audit/{run_id}. No auth, share with any auditor. Chain validity computed fresh on every request. No cached result to falsify.TRIBUNAL is an adversarial examiner trained on Federal Reserve SR 11-7 — the model risk management guidance Tier-1 banks operate under. It cross-examines a recorded agent run the way a hostile bank examiner would. No charity. No benefit of the doubt.
“The aviation black box doesn't make planes safer by itself. It makes crashes survivable as information.BLACKBOX does the same for AI agents. Every fault, every decision, sealed into a chain that cannot be altered after the fact.”
Every day your agents run without a tamper-evident record is a day you can't prove what happened. The regulator doesn't accept “we had logs.”