Recorded outside the system
The record does not live inside your agent runtime, or inside the model provider. It lives in an independent layer neither party controls.
Sealed at the moment it happens
Each event is cryptographically chained and signed client-side before transmission. Modification after the fact is mathematically detectable by anyone.
Non-repudiation
Signed with keys only you hold. DarkMatter cannot forge a record on your behalf — non-repudiation by construction, not by policy.
dm.commit() call. No extra steps.darkmatter keys generate.Payload wasn’t altered after commit
The SHA-256 hash is computed client-side before transmission. Any modification breaks the hash. Verifiable offline.
Record predates any dispute
OpenTimestamps anchors checkpoint bundles to the Bitcoin blockchain. The timestamp proof is external and independently verifiable.
DarkMatter cannot forge a record
Customer-held Ed25519 keys sign the envelope before it reaches our servers. We never see the private key. We cannot produce a valid signature.
Payload confidentiality
Payloads are stored in plaintext by default. DarkMatter personnel with database access can read them. BYOK encryption addresses this for Enterprise customers.
Verify it yourself.
Download a proof bundle and run the offline verifier. No DarkMatter account required.