The Magenta Canon proof page presents committed, independently verifiable evidence that AI-agent tool calls are gated before they execute. A standalone verifier re-derives the cryptography from a committed sample bundle, returning ORIGIN AND INTEGRITY VERIFIED for the valid bundle and VERIFICATION FAILED for a tampered one.
- Real demo output: an $89 refund allowed, a $250 refund blocked before it reaches the tool
- Committed sample evidence: two signed, hash-chained receipts and a signed tree head
- Independent verification: the verifier shares no code with the server
VERIFY, DON'T TRUST
Don't trust us. Check it.
Magenta gates an AI agent's actions before they execute and produces cryptographic evidence after. Every artifact below is committed to the repository and independently verifiable.
The 90-Second Proof
Real output from the one-command demo: an $89 refund is allowed, a $250 refund is blocked at the gate, the downstream tool's own log shows the blocked call never arrived, the evidence verifies, and tampering with one byte makes verification fail.
Verify It Yourself
The committed sample bundle holds two receipts and a signed tree of size two. A standalone verifier — importing nothing from the server — returns ORIGIN AND INTEGRITY VERIFIED for the valid bundle and VERIFICATION FAILED for the tampered negative-control bundle.
Honest Scope
The sample is a local demo artifact, not production evidence. The hosted evidence surface is ephemeral unless the durable Postgres witness is activated, and the demo witness key is not the pinned production key. The recorded development runs and CI proofs are labeled as such.
Run It Yourself
Clone the repository and run the one-command demo, then re-run the standalone verifier against the committed bundle. The verifier depends only on standard cryptography and shares no code with the Magenta server.