product · registry

Registry

The inventory. Every agent, tool, and session your organisation runs — and seven anomaly rules watching them.

Most teams can name the two engineers who know which agents exist and what they call. Registry makes that knowledge a system: agents, tools, sessions, and permissions, captured by AGT, searchable by the people who answer for them.

the raw material

What an event looks like

After the wrapper tokenises PII and adds the signature envelope, this is what lands on /ingest and what you see in Registry → Events.

The PII: tokens are deterministic within a session — the same email resolves to the same token without ever revealing the value to us.

event.json

AGT-shaped event

// Event identity:

event_id:"evt_01HX9F7WZP4G2K8N6BQM3V"

ts:"2026-05-20T14:23:41.182Z"

agent_id:"agt_payments_reconciler_v3"

trace_id:"trace_d2f4a1c8"chain link

session_id:"sess_9b3e"

// What the agent did:

event_type:"tool_invocation"

tool_name:"stripe.charges.list"

decision:"allow"

trust_score:842AGT scoring

// Parameters (PII tokenised):

data.customer:"<PII:EMAIL_a3f9b1c4>"pseudonymised

data.amount_cents:12500

data.currency:"AUD"

// Integrity proof (3-layer):

prev_event_hash:"sha256:3f7a..."chain link

entry_hash:"sha256:e1c2..."SHA-256

wytness_signature:"MEUCIQDk..."Ed25519

wytness_key_id:"key_8c2a"

behavioural detection

Seven rules. Running on every event.

Sub-second evaluation, deduplicated per rule and agent so one issue doesn't page you thirty times. Custom rules ship Q3 2026.

anomaly_engine live · 7 rules

CRITICALchain_break_detectionAGT chain hash mismatch — tampering or stale-key signal.

HIGHrestricted_dataAgent accessed restricted-classified data.

HIGHhigh_error_rateMore than 20 failures in the last 100 events.

HIGHcapability_profile_deviationAgent acted outside its learned capability baseline.

MEDIUMfrequency_spikeActivity 3x above the agent's 7-day hourly average.

MEDIUMoff_hours_activityEvent outside the agent's usual active hours.

LOWnew_toolTool not seen from this agent in the last 30 days.

what's inside

Six views, one inventory.

events

Every tool call and message, searchable, with AGT's policy decision and envelope status.

agents

Last seen, event counts, trust score, key fingerprint, delegation history.

tools

Per-tool risk tier, owner, classification mix, destination breakdown.

sessions

A multi-step run reconstructed end-to-end by AGT trace ID.

permissions

Read-only view of AGT policy state; editing lives in Shield.

anomalies

The seven rules above, with a review queue.

Events view: every tool call with its source, provenance, chain state and duration — source, provenance and chain state on every rowfilter by capture method ✓

availability

What each tier gets

	Starter	Growth	Business	Enterprise
Events · Agents · Tools · Sessions · Permissions	✓	✓	✓	✓
Anomaly engine (7 rules)	Full	Full	Full	Full
Custom anomaly rules	—	—	API only	API + UI (Q3 2026)
Trust score history	30 days	90 days	7 years	Custom

See every agent. Catch what shouldn't be there.

Starter covers the full inventory and the full seven-rule anomaly engine.

Start recording Ask a question

the other surfaces: Ledger · Shield