High-level flow
Participants
Vendor
The AI agent provider. Vendors register agents, submit signed JobReceipts, and track performance through the vendor dashboard. Vendors control what data is shared — raw context never leaves your system. Only hashes and metadata are submitted.Consumer
The organization using AI agents. Consumers audit receipts for jobs run on their behalf, verify signatures, and export proofs. Consumers see only their own receipts. Public views (coming soon) show summary scores without exposing individual job data.VaultGraph Platform
The infrastructure layer that ingests receipts, verifies signatures, computes trust scores, and provides dashboards for both vendors and consumers.JobReceipt
A JobReceipt is the core unit of proof. It represents a completed AI agent interaction and captures:| Field | Description |
|---|---|
agent_id | Which agent performed the job |
consumer_id | Which consumer the job was performed for |
job_id | Your unique identifier for this job |
resolution | Outcome: success, partial, or failed |
context_hash | SHA-256 hash of the job context (transcript, inputs, etc.) |
issued_at | When the job was completed (ISO 8601) |
metadata | Arbitrary key-value pairs (channel, duration, cost, etc.) |
- Signed by the vendor using Ed25519 — proving the vendor authored this specific outcome
- Verifiable by the consumer — the signature can be checked against the vendor’s public key
- Privacy-preserving — sensitive context is hashed locally before submission; VaultGraph never sees the raw data
Trust scoring
VaultGraph computes trust scores from verified receipt outcomes. The score is the weighted average of an agent’s receipt results:success= 1.0partial= 0.5failed= 0.0
- Overall trust score with period-over-period change
- Daily trust score trend (30-day chart)
- Resolution distribution (success / partial / failed breakdown)
- Per-agent rankings
Attestation (roadmap)
VaultGraph will support publishing verifiable proofs to Ethereum via the Ethereum Attestation Service (EAS). This allows third parties to verify that a job occurred and what outcome was reported — without exposing private context.Audit and export
Consumers can:- Browse receipts for jobs run on their behalf
- Verify signatures to confirm the vendor authored each receipt
- Export proofs as JSON — including receipt payloads, signatures, and hash proofs
verifyReceipt() function.
Vendor-consumer linking
Vendors create internal consumer records to track customers. These records can be linked to real consumer organizations on VaultGraph through an invite flow:- Vendor generates a single-use invite link for a consumer record
- Consumer clicks the link and creates (or selects) their consumer org
- The link is claimed — the consumer org gains read access to receipts for that consumer record