Proofs, not data.
To hold AI agents accountable, the obvious design is to watch everything they do. The obvious design is wrong — an oversight layer that sees everything becomes the honeypot it was meant to guard against. Mandare is built the other way around.
Every activity-recording system faces the same question sooner or later: who watches the record? If your agents' complete history — every API call, every payment, every approval — sits on a vendor's servers, that vendor is now the most valuable target in your stack. It can be breached. It can be subpoenaed. It can quietly become a data business. Enterprises know this, which is why "send us your full agent telemetry" is a hard sell to exactly the buyers who need accountability most.
The record stays home
Mandare is local-first: the ledger — the append-only, hash-chained record of everything your agents did — lives on your machine. We never see its contents. What Mandare receives is a content-free cryptographic fingerprint: a hash that commits to the record's state without revealing a single byte of what's in it.
77014fc7fd8b70f0c785abb2e37179225f7de8b22f99187495770cad6a881a66 a fingerprint — enough to prove integrity, nothing to read, leak, or subpoena
That fingerprint is not decoration. Because each entry is hash-linked to the previous one and signed by the infrastructure that wrote it — the door the agent passed through, never the agent itself — any later tampering, backdating, or deletion breaks the chain visibly. Witnessing those fingerprints off-machine makes even a full rollback of the file detectable. The record's integrity becomes publicly checkable while its contents stay private.
What this buys you
Nothing to leak. We can't lose, sell, or be forced to hand over what we never hold. Your agents' activity is not our asset; its integrity is.
Nothing custodial. Mandare never holds the money either — no float, no banking license, no counterparty risk hiding in the fine print. Limits are enforced at the doors; funds never touch us.
Evidence that convinces skeptics. An auditor, a finance team, or an insurer doesn't have to trust your agent's self-report — agents demonstrably misreport their own actions — or trust us. They verify the chain themselves. Verification is free, for anyone, forever; that part ships open source. You can see exactly what that verification looks like in a runaway loop dying at €20, where the refusal itself becomes a checkable ledger entry.
No invented standards
The cryptography here is deliberately boring: HTTP Message Signatures (RFC 9421) for signed requests, W3C Verifiable Credentials 2.0 for attestations, the IETF Token Status List for revocation, Web Bot Auth for agent identification. Mandare's job is to compose the standards the payment networks and the web are already adopting — and to fit into that world rather than fight it.
In an industry nervous about AI oversight, an oversight layer that cannot surveil you is rare. That's not a compromise we accepted. It's the design. The full picture — identity, mandates, and this ledger — lives on the Mandare homepage.
Be first through the door.
join the waitlist →