The black box for AI systems

The independent record of what your AI agents actually did.

DarkMatter proves what happened.

DarkMatter records every agent action outside your system, seals it the moment it happens, and lets anyone verify it without asking you to vouch for anything. Regulators, auditors, counterparties.

Start recording → See a live proof record →

Out of band

outside the system

Tamper-evident

sealed at commit

Reconstructable

step-by-step replay

ctx_7f3a9b · live record

verifier.local · v1.4

$ darkmatter verify ctx_7f3a9b

✓Payload hashsha256:a9c4e1·8f2b·7d10·e44c

✓Metadata hashsha256:31bd·772a·09cf·b6e2

✓Envelope hashsha256:fe04·1c8a·5503·ddaf

✓Ed25519 signatureed25519:5d2a·…·valid

✓Chain linkageparent → ctx_7f3a9a · OK

✓OpenTimestampsanchored · recent

All checks passed: L3 verified

sealed at commit time · verified locally

ed25519 · sha-256 · opentimestamps run locally →

no DarkMatter account · no internet · no trust in us

Python SDK TypeScript SDK LangGraph · soon Anthropic SDK OpenAI SDK CrewAI · soon AWS Bedrock · soon Local models REST API Self-host · soon

L101 / 03

Recorded outside the system

The record does not live inside your agent runtime, or inside the model provider. It lives in an independent layer neither party controls.

L202 / 03

Sealed at the moment it happens

Each event is cryptographically chained and signed client-side before transmission. Any modification breaks the hash chain, detectable by anyone who runs the verifier.

L303 / 03

Customer-verified, not vendor-verified

Signed with keys only you hold. DarkMatter cannot forge a record on your behalf. Non-repudiation by construction, not by policy.

One call. At decision time.

The record was written before you knew you'd need it.That's what makes it credible.

A record you control is not independent evidence. DarkMatter inverts that. The chain is sealed at the moment of action and lives somewhere you don't control, which is exactly why it can be trusted.

Read the SDK reference →

agent.py

ctx_7f3a9b · 340 ms

# At the moment of the decision, before anyone knew it would matter.
dm.commit(payload={
    "input":  "Approve payment to Acme Corp ($84,000)",
    "output": "Payment approved. Scheduled for Friday.",
    "model":  "claude-sonnet-4-6",
})

# Returns instantly. The record exists outside your system from this moment.
{
    "id": "ctx_7f3a9b…",
    "integrity": {
        "payload_hash":        "sha256:a9c4e1…",
        "verification_status": "valid"
    },
    "verification_url": "https://darkmatterhub.ai/r/ctx_7f3a9b"
}

Verification levels

Not every record carries the same weight. DarkMatter makes that explicit.

L101

Verifiable record

SHA-256 payload hash + parent chain linkage. Tampering at any node breaks every downstream hash. Independent offline verifier included.

Default with every dm.commit() call. No extra steps.

L202

Independent verification

Signed checkpoint bundles anchored via OpenTimestamps. Timestamp proof lives outside DarkMatter's infrastructure entirely.

Automatic. Every checkpoint batch is anchored and signed.

L303

Non-repudiation

Customer-held signing keys. Even DarkMatter cannot forge a record. Only your key can sign a valid commit.

Available now. Generate a key with darkmatter keys generate.

See it before you need it

When the system fails, logs are not enough.DarkMatter is the record that survives it.

Commit a record, replay the chain, export a proof bundle, and verify it yourself with zero DarkMatter dependency. Before writing any production code.

Run the demo → Read the docs

The aviation parallel

Every commercial flight has a black box.Every AI agent should too.

Aviation didn't put flight data recorders in planes because pilots were untrustworthy. It put them there because when something goes wrong at altitude, memory is unreliable, incentives are misaligned, and the only thing that matters is what actually happened.

Nobody in aviation argues the recorder is optional. The independence is the point.

DarkMatter is the flight data recorder for AI systems. Recorded outside the system that produced the action, sealed the moment it happens, reconstructable by anyone who needs to know.