Halo Record
bkuan001Halo Record keeps a tamper-evident audit trail of what an AI agent did: every tool call, model call, data access and approval becomes a record in an append-only, hash-chained log, rendered as a self-verifying report a customer can check. Checkpoints can be anchored to an outside witness or an RFC 3161 timestamp authority. The package is the reference implementation of an open record format.
Tagged independently verifiable, with the limit its own documentation states: the chain alone cannot catch the party running the recorder unless a checkpoint was shared.
Openness
5 high confidence- license
- Apache-2.0(OSI)
- source
- public
- core features withheld
- no
Recorder, verifier, witness client and report server are all in the Apache-2.0 repository, and the project states that the record format is open and free to implement. The author plans to fund it with a hosted witness service, which is offered beside the code rather than carved out of it.
- https://raw.githubusercontent.com/bkuan001/halo-record/main/LICENSE recorded 2026-09-26
Apache License, Version 2.0, full text
- https://raw.githubusercontent.com/bkuan001/halo-record/main/NOTICE recorded 2026-09-26
"halo-record Copyright 2026 Halo Record, Inc. and contributors Licensed under the Apache License, Version 2.0"
- https://raw.githubusercontent.com/bkuan001/halo-record/main/README.md recorded 2026-09-26
"The record format is open and free to implement. This package is the reference implementation: recorder, verifier, witness client, and report server."; "A hosted, recognized witness is how this project will sustain itself."
- https://ungh.cc/repos/bkuan001/halo-record/files/main recorded 2026-09-26
Full file listing of bkuan001/halo-record main, 90 paths; no ee/, enterprise/, commercial/ or proprietary/ directory
Adoption
1 medium confidencePyPI downloads of halo-record, the project's only package, measure its use. The project is young, first published in 2026.
- https://pypistats.org/api/packages/halo-record/recent recorded 2026-09-26
last_month downloads = 1,024 for halo-record
Capability
4 medium confidenceAnyone holding a checkpoint can confirm the records behind it were never altered, without trusting whoever produced them. The records still describe what the operator's recorder saw, so they fall a step short of NVIDIA's hardware attestation of the execution itself.
- https://raw.githubusercontent.com/bkuan001/halo-record/main/README.md recorded 2026-09-26
"Any party holding a checkpoint of the chain can verify the records behind it were never altered, without trusting whoever produced them"; the chain alone "is tamper-evident against everyone except the party operating the recorder"
Verified 2026-09-26