00 · ABSTRACT
Every claim here carries its status, and every number its provenance.
Every claim below carries a status and a provenance class, stated exactly: an artifact you can fetch right now, an artifact rendered on this page, a live walkthrough of the platform shown on request, or an artifact available under NDA on request. Statuses are VERIFIED, MEASURED, IN INTEGRATION, ROADMAP, or DECLARED. Every roadmap-status item we track is listed beside the verified ones.
REC 00 ▸ sha256:1c3d…cae5 ▸ prev e0eb…133b ▸ build 2026-09-03T21:23Z
01 · CLAIMS LEDGER
The ledger.
Every VERIFIED row points at a real artifact you can fetch or request, never demo data. Walkthroughs marked ON REQUEST and artifacts marked UNDER NDA are available through the contact form below.
Current append-path audit entries are hash-linked and Ed25519-signed; verification protocol and per-workspace key discovery published
Provenance
FETCHABLE: curl https://rensei.ai/.well-known/audit-keys.json
retained history may include legacy unsigned entries
The execution layer (donmai) is open source under the MIT license
Provenance
FETCHABLE: https://github.com/RenseiAI/donmai
199 historical policy denies immutable on Rensei's own production audit chain
Provenance
UNDER NDA: audit export, available under NDA on request
count as of 2026-05-21
Knowledge-graph recall on Rensei's own production sessions, Cedar-authorized and hash-chain audited
Provenance
UNDER NDA: injection-row and audit-row exports
Survival-to-posterior routing wiring: survival rewards join the routing posteriors by decision id, with propensity recorded at decision time for offline evaluation
Provenance
UNDER NDA: decision-record export (candidates, exclusion reasons, propensity, ruleset revision), available under NDA on request
live ranking is org opt-in and kill-switched; unopted orgs route in shadow mode; verified 2026-08-12
Every routing decision, placement and claim, writes a typed decision record: candidates considered, a named exclusion reason per rejected candidate, the chosen target, and the ruleset revision it was evaluated against
Provenance
UNDER NDA: placement-decision record export, available under NDA on request
a hosted explain surface walks the same record across all six decision stages; verified 2026-08-12
Fail-static routing durability: the local daemon evaluates a signed, versioned ruleset snapshot, so claims keep flowing through a control-plane outage within a bounded, exposed staleness window
Provenance
UNDER NDA: ruleset-snapshot compiler and daemon claim-gate source, available under NDA on request
failure posture is declared per decision class: permission stays fail-closed against the cached bundle, placement and ranking are fail-static; verified 2026-08-12
SOC 2 Type I
Provenance
Governor hard-caps and holds
Provenance
RENDERED: fail-loop specimen on the evidence page
loop bounding today is the eight-dispatch cap
Interactive sessions attach a live terminal to a running agent session from the web, an iPhone, or an iPad, with the swarm sidebar, host stats, and the agent-to-agent rail
Provenance
ON REQUEST: live session walkthrough
live on the platform; flipped from DECLARED on 2026-09-02 on the founder's confirmation. The platform figure renders a Pi harness on a fictional model, not a customer session
An interactive session's terminal stream is recorded as a cast under its org's recording policy, and once the session ends anyone entitled to it can replay the recording in the platform player, with seek, playback speed, and the session record beside it
Provenance
ON REQUEST: recorded session replay walkthrough
part of interactive sessions since they launched in summer 2026 and used daily. Recording is an org entitlement with a per-session policy (org default, opt out, retained) and a per-plan retention window; the player is the web view, and the CLI tails a finished recording as text. Checking replays into a durable evidence store and learning over them is roadmap. The platform figure replays a fictional session
Agents coordinate with each other over the A2A protocol across session, harness and model boundaries: tested across Claude Code, Codex, Pi, Antigravity and OpenCode, on Anthropic, OpenAI, Google, the Vercel AI Gateway, Z.ai, xAI and local models
Provenance
ON REQUEST: cross-harness coordination walkthrough
live on the platform and stated by the founder on 2026-09-03; the platform figures show the agent-to-agent rail on a fictional swarm. A multiplexer switches a person between sessions; this is the sessions coordinating among themselves
A declarative workflow takes a Linear issue from intake through plan, implement, test gate, review and human sign-off to a merged pull request, dispatching each stage to an agent on the routed provider
Provenance
ON REQUEST: issue-to-merge run walkthrough
live for Linear issues; the one place a person acts is the sign-off gate, and that ruling lands on the audit chain. The platform figure replays a fictional run
GitHub Issues, Jira and Asana as issue sources for the same workflow
Provenance
GitHub Issues partial, Jira and Asana early, as of 2026-09-03; Linear is the verified source above
A user-scoped inbox lists every session a user is entitled to see across orgs and projects, in creation order with urgency by badge, a needs-you tray, and batch approval
Provenance
RENDERED: inbox specimen on the platform page
design ruled 2026-08-14 (single partition, positions hold until filed); ships with the unified session stream
On-prem deployment
Provenance
FETCHABLE: /security#deployment
Rensei deliberately publishes one redacted signed sample from its own platform for account-free offline verification. It includes a key-discovery link and a copy-pasteable verification command. It is a public example, not a complete chain export or evidence of continuous monitoring coverage. The verification protocol and key catalog describe the workspace-scoped key path. Signature presence and verification are distinct: the signature is the evidence to check, and checking it is a separate step. Authenticated audit reads use application-level organization/workspace authorization and query filtering. Project filtering is route-dependent and applies only on routes that accept project scope. These audit-read routes are not Cedar-gated, and this page does not claim production database RLS as their live runtime enforcement boundary.
REC 01 ▸ sha256:4ac9…7cc9 ▸ prev 1c3d…cae5 ▸ build 2026-09-03T21:23Z
02 · DERIVATION
Four primitives, derived.
Cedar policy enforcement, hash-chained audit, fail-closed egress, and decision provenance are properties of a deterministic execution graph. None of them is a module that could have been left out.
Cedar policy enforcement
Declarative workflows compile to a durable execution graph, and every outbound tool call in that graph passes a Cedar policy-enforcement point before egress. Coverage is fixed at compilation; a step cannot route around a check the graph places in its path.
Hash-chained audit
Entries produced by the current append path link each entry hash to the prior hash and carry per-workspace Ed25519 signatures. Retained history can include legacy unsigned entries. A holder can recompute a supplied segment and check signatures where present against published keys. That establishes tamper-evidence for the checked segment. It does not establish capture or full-history completeness or truth at capture. External timestamp anchoring is not part of this published proof.
Fail-closed egress
A missing or failed policy ruling denies by default. The enforcement point lives in the execution path itself, so an unreachable policy engine stops state-modifying calls rather than waving them through; observation-only reads proceed and land on the audit chain.
Decision provenance
Every action binds model version, prompt, context, and policy ruling into a signed decision record. When models are nondeterministic, that binding is what makes a decision reconstructable.
The derivation is the public answer to how this is different. LLMs run as bounded operators inside workflow steps; the control loop is deterministic code. When the control loop is instead a model that can rewrite the steps it is about to run, the record of what ran is only a claim: tamper-evident audit requires a loop that cannot edit its own history. A deterministic graph forecloses that failure structurally. The structure that executed is the structure that was reviewed, and the chain that recorded it sits outside the reach of the thing it records.
REC 02 ▸ sha256:d360…a518 ▸ prev 4ac9…7cc9 ▸ build 2026-09-03T21:23Z
03 · VERIFY THIS PAGE
This page can prove itself.
At build time, a script canonicalizes each chapter of this page: the rendered text plus, in order, every link target and image reference, normalized and whitespace-collapsed. Each chapter record hashes with the record before it, the doc strip under the navigation is the genesis record, and the page hash in the footer commits to all of them. The full construction, and what each verifier outcome means, is published on the verification method page.
The chain proves the prose, links, and figures you received are the ones that were built, complete and in order. It does not prove the claims true. The ledger above does that.
Hash-chaining this page took a build script. A SOC 2 takes an auditor, and its status is printed in the ledger above as ROADMAP.
The verifier source is MIT licensed and runs against this site's own pages.
REC 03 ▸ sha256:18a1…cb62 ▸ prev d360…a518 ▸ build 2026-09-03T21:23Z
04 · SEED PLAYGROUND
Determinism you can poke.
The strand below is a pure function of its seed. The default seed is this page's own record hash. Change it, re-render, change it back: the render is reproduced exactly.
The same property holds for workflow runs: graph, state transitions, and policy evaluations are deterministic and replayable. The strand generator is MIT licensed and ships alongside the verifier.
REC 04 ▸ sha256:0b1d…9409 ▸ prev 18a1…cb62 ▸ build 2026-09-03T21:23Z
05 · SPECIMENS
Rendered artifacts.
The platform components run in your browser over declared demo data. These figures are the page's RENDERED provenance class.
Posterior distributions, Beta(α, β) per model arm
Figures are live component renders, not screenshots. Demo data.
Per-line provenance and survival measurement are live: survival rewards join the routing posteriors by decision id, with propensity recorded for offline evaluation. Live ranking is org opt-in and kill-switched; unopted orgs run in shadow mode.
Code Survival
30 days after mergeShare of agent-authored lines still present at HEAD, 30 days after merge. Hot-weighted applies a soft weight to lines that are statically reachable from a user-facing entrypoint - this is static reachability, not a measure of what end users actually executed.
Per-symbol drill-down (top 10)
Audit log
meridian-robotics/assembly-toolingdemo data · Jun 9, 2026 · UTC- genesis000000…000000
- 13:58:07Issue acceptedintake-serviceMER-2841 · Gripper calibration drifts after firmware flash · P2000000…000000d3c0de…b8656b
- 14:02:31Plan approvedm.alvarez3-step plan · scope: services/calibration · est. smalld3c0de…b8656bd3c0de…22eacd
- Decision
dec_d3c0de24dd1cbinds the model, prompt envelope, retrieved context, and policy ruling to one signed audit entry.Modelclaude-sonnet-5version: claude-sonnet-5 · provider snapshot 2026-06-30Prompt envelopetemplate: implementer.dispatch@v12sha256: d3c0dee3c9…b067e2f5d9tokens: 2,113 system · 18,402 inputtools granted: git, fs.write (services/calibration/**), test-runnerRetrieved contextmemobs_mem_a41f2c - “Calibration offsets are written by flash.ts, not the EEPROM map” · w 0.82fileservices/calibration/flash.ts · w 0.74filedocs/runbooks/gripper-calibration.md · w 0.61issueMER-2841 · intake thread (4 messages)Policy ruling · CedarALLOWfleet.dispatch.scoped-write@v7matched rules: allow-implementer-scoped-write, require-branch-isolationpolicy hash: d3c0deebfd…e103274083Cryptographic proofentry hash: d3c0deede1f3360c9c77bee1e4bfbe8cb2eb073fd81df5d241c11d8573ebca0fsequence: 4183signature:ed25519 · DEMOSIGqNdHF/pEQtKdTnhST…(key meridian-audit-2026a)Merkle inclusion: leaf 4183 / tree size 4,187 - 14:19:12Implementation completeimplementer/mr-fleet-02+214 −38 across 6 files · tests green · branch agent/mer-2841d3c0de…ebca0fd3c0de…e52bab
- 14:31:58Review approvedk.tanaka2 comments resolved · approved for merged3c0de…e52babd3c0de…5945d7
- 14:32:20Change mergedmerge-botmerge d3c0de1 → main · checks greend3c0de…5945d7d3c0de…3c339d
- 14:35:00Merkle checkpointaudit-serviceroot sealed · tree size 4,187 · signedd3c0de…3c339dd3c0de…845dc2
- t+0.0s
ACCEPTANCEFAILED
The acceptance gate fails REN-demo: tighten retry policy.
- t+0.4s
STATEAUTO-REJECTED
The issue is auto-rejected. No human dispatch is required to close the loop.
- t+5.1s
DISPATCH3 OF 8
Refinement dispatches in about five seconds, parked behind the active session.
- t+5.2s
RECORDON CHAIN
The transition lands on the audit chain, signed and linked to the event before it.
dispatch cap: 8per issue, enforced today · governor-level hard caps and holds: ROADMAP · ledger row ↑
REC 05 ▸ sha256:c3c5…c21c ▸ prev 0b1d…9409 ▸ build 2026-09-03T21:23Z
06 · VELOCITY
Built at pace.
The git history is the record.
8,284
commits across 24 repos, public and private · fetched 2026-09-02
4,933
commits since 2026-06-01, the summer build · fetched 2026-09-02
550
releases · fetched 2026-09-02
REC 06 ▸ sha256:88b0…f58c ▸ prev c3c5…c21c ▸ build 2026-09-03T21:23Z
07 · RUN YOUR OWN
Bring your own benchmark.
The most credible number for your evaluation is one produced on your workload. We run scoped benchmark engagements under NDA: a workload you define, a written methodology your team can check, and a measured result you keep.
Disclosure stays in your hands; nothing is published without your sign-off. Start below.
REC 07 ▸ sha256:0428…e098 ▸ prev 88b0…f58c ▸ build 2026-09-03T21:23Z
08 · CONTACT
Request the artifacts.
Artifacts under NDA ship on request. Every request for the artifacts gets a reply.
REC 08 ▸ sha256:454e…5611 ▸ prev 0428…e098 ▸ build 2026-09-03T21:23Z