execution-evidence

Walkthrough demo for the execution-evidence path in the Digital Biosphere Architecture.

Local-first execution evidence recorder for Solana swaps through Jupiter.

Open execution-evidence schema, simulated fixtures, and validator for AI-agent receipts.

A vendor-neutral protocol for recording why, by whom, under which policies, scopes, risks, and human-review conditions an AI agent action was authorized, restricted, deferred, or denied.

Background Activity Moderator (BAM/DAM) forensic analyzer — per-user last-execution evidence from the Windows SYSTEM hive. Rust: bam-core reader + bam-forensic analyzer/CLI.

Windows AppCompatCache (ShimCache) forensic analyzer — reads the AppCompatCache value from a SYSTEM hive and r

Windows Amcache.hve forensic analyzer — reports inventoried executables (path, SHA-1, publisher) and devices w

Evidence protocol and benchmark harness for verifying autonomous agent task completion.

UserAssist forensic analyzer — decodes Windows GUI execution evidence (NTUSER.DAT) and flags masquerade/staging anomalies. Rust: userassist-core reader + userassist-forensic analyzer/CLI.