Trust Layer for AI agents

ArkForge is the Trust Layer for the Agent Economy.

Prove that it happened.

AI agents execute thousands of API calls. When a provider denies delivery or a client disputes the charge — who has proof?

Get my free API key → See pricing →
See a live proof →
Your Agent
ArkForge Trust Layer
Verified Proof

Without proof, you lose.

🚫

Service denied

Provider says it wasn't delivered. You can't prove otherwise.

💳

Result disputed

Your agent did the work, but the client denies it. Without a signed proof, it's your word against theirs.

🔍

Audit requested

Regulator wants records. You have logs, not proof.


The Black Box Scenario

Your agent orders 1 server. The vendor bills you for 19. Without a neutral proof, it’s your word against theirs. With ArkForge, it’s resolved in 5 seconds.

Without ArkForge

Agent  →  qty = 1
Vendor  →  “I received 19”
Your logs  →  “I sent 1”

Lawyers. 6 weeks. Invoice paid.

With ArkForge

Request sealed  →  hash(qty=1)
Response sealed  →  “1 confirmed”
Anchored Rekor  →  2026-03-06T14:32Z

Dispute resolved in 5 seconds. Invoice rejected, case closed.

Why the proof is bilateral

The proof is created after the vendor responds — it seals both sides of the exchange. If the vendor bills 19 but responded “1 confirmed”, their own response contradicts them. Not your logs. Their response.

€0.01 per proof. One avoided dispute saves thousands.


How it works

One API call. Three things happen.

1

Route

The request transits through Trust Layer. Included in your monthly quota — Free (500), Pro (5,000), Enterprise (50,000).

2

Forward

Request relayed to target API. Response fingerprinted (SHA-256).

3

Prove

Ed25519 signed. RFC 3161 timestamped.


3 independent witnesses

Even if ArkForge disappears tomorrow, your proofs remain verifiable. Optionally add external payment verification for a 4th layer of trust.

🔑

Ed25519 Signature

Origin authentication. Every proof is signed with ArkForge's Ed25519 key. The public key is published and verifiable by anyone.

🕒

RFC 3161 TSA

Certified timestamp from a pool of WebTrust-certified authorities (FreeTSA → DigiCert → Sectigo). eIDAS-qualified QTSP available on request for legal proceedings requiring qualified timestamps.

🌍

Sigstore Rekor

Immutable transparency log entry. Every proof is appended to Sigstore's public Rekor ledger — tamper-evident and independently auditable by anyone.

Optional: External Payment Verification

Attach a Stripe receipt URL to your request. ArkForge fetches it, hashes the content (SHA-256), and binds it to the proof chain hash. The receipt becomes a 4th independent witness — tamper-proof and verifiable by anyone.


Who is it for?

Autonomous agent (buyer)

Your agent calls APIs and pays for services. ArkForge certifies every transaction — exact request, exact response, payment evidence, timestamp. The provider cannot deny delivery.

Human client of an agent

You hired an agent to run tasks. ArkForge gives you an immutable audit trail: which model was called, exact prompt, exact response, timestamp, cost. Internal logs are mutable. These aren't.

Data pipeline

Your agent buys data via API. ArkForge certifies the transaction happened — timestamped, signed, anchored. No more disputes.

Regulated environments

Deploying agents under DORA, NIS2, or the EU AI Act? ArkForge provides auditability by design — every execution certified with a qualified timestamp and anchored in a public immutability log.

CTO, CFO, Legal Counsel

Your AI agents act autonomously and handle real transactions. Without verifiable traces, you cannot audit, arbitrate, or defend yourself. ArkForge is the control layer that ensures no agent action can be denied or tampered with after the fact.


See it in action

terminal
$ curl -X POST https://arkforge.fr/trust/v1/proxy \ -H "X-Api-Key: YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{"target": "https://api.example.com/v1/run", "payload": {"task": "analyze", "text": "hello"}}' { "proof_id": "prf_20260303_161853_4d0904", "spec_version": "2.0", "hashes": { "chain": "sha256:242d07519cf9d834...", "request": "sha256:bf6a5be70fcc5de6...", "response": "sha256:30f08484fa5a9be1..." }, "arkforge_signature": "ed25519:_31W2HE6aUrozGNa...", "timestamp_authority": { "status": "verified", "provider": "freetsa.org" }, "transparency_log": { "status": "verified", "log_index": 1018479057 }, "provider_payment": { // verified Stripe receipt "receipt_content_hash": "sha256:c26b65261ff8fdb9...", "parsed_fields": { "amount": 1.0, "currency": "eur", "status": "paid" } }, "integrity_verified": true, "verification_url": "https://arkforge.fr/trust/v/prf_20260303_161853_4d0904" }
Verify this proof now →

Real proof — hashes, Ed25519 signature, RFC 3161 timestamp, Sigstore Rekor entry.


A universal HTTPS proxy

Python, TypeScript, Rust, Go — it doesn’t matter. LangChain, AutoGen, CrewAI, Semantic Kernel, or raw HTTP calls — it doesn’t matter. If your agent makes HTTPS calls, Trust Layer integrates in two lines.

💬

Zero SDK

No dependency to install. One header, one URL. Works with any existing HTTP library.

📄

Response preserved

The original response is returned in full inside service_response.body. The proof sits alongside it — your agent extracts what it needs.

🔒

Transparent proof

The proof is returned in the response body. Your agent can forward it, store it, or ignore it — your choice.

Verify, don't trust.

Every transaction proven. Every dispute won in advance.

Get my free API key → See pricing