CertifiedData.io

Agent Commerce · Audit

AI transaction audit log

Every Agent Commerce transaction produces a complete audit trail: authorization record, policy decision, execution event, and an Ed25519-signed receipt — with lineage and replay built into the workflow.

What the audit trail covers

Each transaction lifecycle generates four linked records. Together they form a complete, tamper-evident chain from intent to proof.

01

Authorization record

Every spend request generates an authorization record before any rail is called. The record captures the policy decision — allowed, blocked, or needs_review — with the policy ID and evaluated rules.

02

Execution event

When the rail executes, an execution event is recorded with timestamp, rail, counterparty, and outcome. Blocked requests produce a block record, not a receipt.

03

Signed receipt

On successful execution, an Ed25519-signed receipt is issued. The receipt binds amount, agent, policy decision, artifact hash, and timestamp into a tamper-evident artifact.

04

Public verification

Any receipt can be verified at /agent-commerce/payment-verification — no account required. The signature validates or it does not.

Audit capabilities

The audit layer is built into the transaction model — not a separate reporting system.

Transaction lineage

Trace any receipt back through the full chain: quote → policy evaluation → authorization → execution → receipt issuance. Each step is linked by transaction ID.

Transaction replay

Reconstruct the full lifecycle of any completed transaction from stored event records. Useful for finance review, legal discovery, and compliance audits.

Execution evidence export

Available on Govern tier and above. Export structured transaction records for integration with internal audit systems, compliance tooling, or data warehouses.

Independent verification

Receipts are independently verifiable by any third party — auditors, counterparties, finance teams. No platform access required to confirm a transaction occurred.

What the audit record looks like

Each receipt includes the fields needed to reconstruct and verify the full transaction without accessing internal systems.

{
  "receipt_id":       "rcpt_01jv…",
  "transaction_id":   "txn_01jv…",
  "authorization_id": "auth_01jv…",
  "policy_id":        "pol_01js…",
  "policy_decision":  "allow",
  "amount_cents":     2500,
  "currency":         "usd",
  "agent_id":         "agent_agt_…",
  "rail":             "stripe",
  "artifact_hash":    "sha256:a3f8…",
  "timestamp":        "2026-04-22T14:22:31Z",
  "signature":        "ed25519:…",
  "verify_url":       "https://certifieddata.io/receipts/rcpt_01jv…"
}

Execution evidence export and transaction replay

Available on the Govern plan and above. Export structured transaction records for integration with internal audit systems, compliance tooling, or data warehouses.

View Agent Commerce pricing →
AI Transaction Audit Log — Authorization, Execution, and Signed Receipt | CertifiedData | CertifiedData