Understand
Theory Whitepaper Letter
Explore
Lab Trust Triangle Exhibits
Build
Governing Agents Integrate Setup Learn
Reference
Architecture Constraints Security Footprint Sentinel
GitHub
Governing Agents

You deploy the agents.
ZeroPoint makes them accountable.

Agents don't choose governance — you do. ZeroPoint installs into your stack and wraps every interface with cryptographic proof. Every action gets a signed receipt. Every decision gets an audit trail. Your agents don't need to know it's there. They just become governable.

The question isn't whether to trust your agents. It's whether you can prove what they did.


Agents are powerful. They're also opaque.

You're deploying agents that call tools, make decisions, and produce artifacts — often across multiple runtimes, orchestrators, and model providers. When something goes wrong, you get logs if you're lucky. You get nothing if you're not.

Humans build trust through implicit trajectory — years of interaction, social context, reputation built in relationships. Agents don't have that luxury. They operate at speed, in isolation, with no historical relationship to vouch for them. Trust isn't implicit; it must be explicit.

The harder question: when things go right, can you prove it? Can you show an auditor, a client, or a regulator exactly what happened, in what order, with what authority? Without an explicit trajectory of evidence, agent autonomy is a liability.


Your stack before and after ZeroPoint

Without ZeroPoint

Agent actions are logged inconsistently or not at all
Delegation chains are invisible — you can't tell which agent did what
Trust is binary: sandbox everything or hope for the best
Audit means reconstructing behavior from scattered platform logs
Agents can't prove compliance, even when they comply

With ZeroPoint

Every action produces a signed, hash-chained receipt automatically
Parent-child receipt chains preserve attribution across delegation
Trust is graduated — agents earn autonomy through verifiable behavior
The receipt chain is the audit trail. Portable. Self-contained.
Agents carry their own proof. Compliance is built into the output.

What your agents gain when ZeroPoint is in the stack

auditability

Proof of History

Every tool call, every policy evaluation, every decision point is captured in a tamper-evident receipt. Not in a vendor dashboard you don't control — in a chain you own.

autonomy

Graduated Trust

Stop choosing between "sandbox everything" and "YOLO." Trust grades let you expand agent permissions based on verified behavior, not blind faith.

attribution

Clean Delegation

When Agent A delegates to Agent B, the receipt chain tracks it. If something breaks, you know exactly where. No finger-pointing, no forensics — just evidence.

portability

No Platform Lock-In

Receipts are self-contained and transport-agnostic. Move between orchestrators, model providers, or infrastructure and your agents' trust history travels with them.

trajectory

Trust as Trajectory

Your agent's reputation is not a score assigned by a platform. It is a chain of evidence that your agent carries with it. Every action builds trajectory. Every receipt is a link in that chain.


Install once. Govern transparently.

ZeroPoint doesn't require your agents to integrate anything. It wraps the interfaces they already use. Every action becomes a link in an explicit trust trajectory.

01

Install & Configure

Deploy ZeroPoint into your environment. Define policies — what actions are allowed, what requires review, what gets blocked. Your rules, cryptographically enforced.

02

Wrap & Guard

ZeroPoint's guard evaluates every action against your policy set. Each evaluation produces a signed receipt: action, decision, rationale, timestamp, trust grade. The agent doesn't need to cooperate.

03

Verify & Prove

Receipts chain together with hash links. Verify the chain at any time. Hand it to an auditor. Query it programmatically. The proof is always there, always portable, always yours.


How your agents graduate

ZeroPoint enables a trust progression built on trajectory. Start conservative. Expand permissions as agents demonstrate verifiable good behavior through an auditable chain of evidence. Each level is unlocked by what agents have actually done, not what you hope they'll do.

TIER 4
Autonomous
Execute without pre-approval. Full delegation rights. Post-hoc audit.
High
TIER 3
Supervised
Periodic human review. Limited delegation. Batch audit with sampling.
Med
TIER 2
Restricted
Pre-approved action types only. No delegation. Individually audited.
Low
TIER 1
Quarantined
Read-only. No delegation. No network. All actions require human approval.
None
Example Progression
Agent onboarded — enters at Tier 1
Quarantined
50 successful actions, zero violations
→ Tier 2
200 actions, consistent scoped behavior
→ Tier 3
Scope violation — attempted unauthorized write
→ Tier 1
Trust is earned, not declared. Any agent can lose it.
L0

Supervised Execution

Every action requires approval. Receipts prove what was requested and what was authorized. Full training wheels.

L1

Policy-Bound Autonomy

Agents operate freely within defined policy boundaries. Actions that match policy proceed automatically with receipts. Exceptions escalate.

L2

Delegated Authority

Agents can delegate to sub-agents with scoped permissions. Parent-child receipt chains maintain attribution. Trust narrows at each level of delegation.

L3

Cross-Stack Operations

Agents move between orchestrators and infrastructure boundaries with portable proof. No re-establishing trust. The receipt chain speaks for itself.

L4

Proof-Native Autonomy

Agents operate with broad authority because every action produces proof. Hand the receipt chain to a regulator, a client, or an insurer. The proof is built into the work product.


What a governed agent produces

Every action through ZeroPoint generates a receipt. This is what one looks like.

A ZeroPoint Receipt

Each receipt contains: a unique ID, a content hash (Blake3), an Ed25519 signature, a link to the parent receipt, the action evaluated, the policy decision and rationale, a trust grade, and a timestamp. Chained together, these form a tamper-evident audit trail.

In-Band Proof

proof: zp:receipt:<receipt_id>

Agents can attach this header to any output. Any system receiving it can fetch the receipt, verify the chain, and decide how much to trust the claim. The proof travels with the work.

Your agent's reputation is not a score assigned by a platform.
It is a chain of evidence that your agent carries with it.
Every action adds to that trajectory. Every receipt is a link.

Ready to govern your stack?

ZeroPoint is open source, MIT / Apache-2.0 licensed, and built in Rust. 699 tests across 13 crates. No runtime dependency on any platform.