OpenChainGraph Suite · ART-237 · AI Governance

Agent Audit Trail Conformance Validator (IETF AAT)

Validates agent audit trail records against IETF draft-sharif-agent-audit-trail-00 (AAT, expires Sept 2026). Checks required fields, sha256_prev_record chain-link format (/^[0-9a-f]{64}$/ or empty for first record), ECDSA signature presence, and enum conformance. Disambiguates from Wave-24 RFC 9421 HTTP message signature nodes (art-129..132): those validate HTTP message signatures; this node validates agent-to-agent audit trail records.

IETF AAT Draft Agent Audit Trail Conformance Validation Chain-Link Check Proofs Deferred
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Agent & Action Fields
Identifier of the agent that performed the action (e.g. did:web:agent.example.com).
When the action was performed.
Chain Linking
Hash of previous audit trail record. Must be exactly 64 lowercase hex characters, or empty for the first record in a chain.
ECDSA signature over the audit trail record. Leave empty to test non-ECDSA path.
Validation Detail
Execution Hash (SHA-256)







  

    
Ask your agent

    
  

  
Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

  
Run the AINumbers MCP tool `validate_agent_audit_trail`. Task: Validate agent audit trail records against IETF draft-sharif-agent-audit-trail-00 (AAT, expires Sept 2026).
Call it with arguments: {"policy_parameters":{"agent_identity":"did:web:agent.example.com#key-1","action_class":"EXECUTE","outcome":"SUCCESS","trust_level":"HIGH","sha256_prev_record":"aabbccdd11223344aabbccdd11223344aabbccdd11223344aabbccdd11223344","ecdsa_present":true,"record_id":"rec-001"}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-237-validate-agent-audit-trail.html#p=v1.H4sIAAAAAAAA_wH5AAb_eyJhZ2VudF9pZGVudGl0eSI6ImRpZDp3ZWI6YWdlbnQuZXhhbXBsZS5jb20ja2V5LTEiLCJhY3Rpb25fY2xhc3MiOiJFWEVDVVRFIiwib3V0Y29tZSI6IlNVQ0NFU1MiLCJ0cnVzdF9sZXZlbCI6IkhJR0giLCJzaGEyNTZfcHJldl9yZWNvcmQiOiJhYWJiY2NkZDExMjIzMzQ0YWFiYmNjZGQxMTIyMzM0NGFhYmJjY2RkMTEyMjMzNDRhYWJiY2NkZDExMjIzMzQ0IiwiZWNkc2FfcHJlc2VudCI6dHJ1ZSwicmVjb3JkX2lkIjoicmVjLTAwMSJ9z2oVbPkAAAA