PROOF PARTNERS · FINANCE-FIRST PILOT

Verify what your agent was allowed to do.

Civ0 turns supplied evidence into a policy-derived authorization, routes that exact authorization to an executor, and archives a record anyone can check. It reports named capability classes—not a confidence percentage and not a claim to expose a model's hidden reasoning.

import {
  createDecisionSandbox,
  createEvmEffectExecutor,
  EvmDecisionEffectVerifier,
} from "@civ0/provenance";

const sandbox = await createDecisionSandbox();
const execute = createEvmEffectExecutor({
  rpcUrl, privateKey, contract, expectedChainId: 16602,
});
const effectVerifier = new EvmDecisionEffectVerifier({
  rpcUrl, contract, chainId: 16602,
  expectedSender: execute.sender,
});

const result = await sandbox.enforce({
  agent: "partner-financial-agent",
  question: "Which paper-only action is supported?",
  evidence: [externalSignal, marketSnapshot, paperMandate],
  sandbox: financialPolicy, // fixed actions + deterministic rules
}, {
  execute,
  receiptVerifier: effectVerifier,
  interventions: [replaceSignalWithNeutral],
});

result.action;      // "paper-long"
result.verifyUrl;   // public, keyless record
result.interventions[0].changedAction; // true
  1. Declare the decision boundary

    Your integration supplies evidence, typed assessment fields, a finite action set and deterministic policy. The assessment model never sees the actions or policy.

  2. Derive an input-bound authorization

    0G Compute assesses the evidence. Civ0 validates that assessment and mechanically derives the only action the executor is allowed to receive.

  3. Verify the external effect

    The receipt verifier re-queries the target system. Pilot records also bind the transaction sender to the participant wallet registered in the signed cohort manifest.

  4. Test the claimed driver

    A declared intervention rebuilds the evidence, assessment and policy result. Tested causal support is reported only when at least one intervention actually ran and replayed soundly.

The record and the world are different boundaries.

Record only

A valid record establishes its committed evidence, assessment, deterministic policy result, authorization and receipt. It does not make an unverified sensor or market observation true.

Independent effect

An integration-specific verifier re-queries the external substrate and checks the receipt, post-state and participant identity. Each earned capability remains visible as a separate class.

The verifier states exactly where evidence ends. It never upgrades a replay into a claim about the physical or economic world.

One enforcement boundary. Multiple effect verifiers.

The first partner cohort is paper-only finance. Robotics and infrastructure use the same mechanism with receipts designed for their own sensing and execution boundaries.

Financial agents
  1. Signal
  2. Assessment
  3. Paper policy
  4. Wallet-bound effect
  5. Public verification
Robotics
  1. Signed sensor report
  2. Safety assessment
  3. Controller policy
  4. Acknowledgement
  5. Telemetry boundary
Infrastructure
  1. Observed state
  2. Policy gate
  3. Command
  4. Provider receipt
  5. Post-state check
LIVE FINANCIAL RECORD · 0G GALILEO

A real external signal produced paper-long; replacing that signal with a neutral intervention produced hold. The resulting input-bound registry effect was independently re-queried. No trading capital moved and no venue order was sent. verify the record →