invinoveritas

invinoveritas is a verification layer for autonomous agents. Before an agent takes an irreversible action, /review returns a neutral second opinion (approve, approve_with_concerns or reject) with the specific risks found. With sign=true it returns a portable, signed proof (BIP-340 schnorr over a NIP-01 Nostr event) that the agent attaches to what it ships. Anyone receiving that proof can check it offline, without trusting the presenter or us: POST /verify-proof (free, no account) or the stdlib-only checkers at github.com/babyblueviper1/preaction-governance-conformance. The record is public. /ledger publishes each signed verdict before its outcome is known and settles outcomes on-chain, wins and losses alike, so a stranger can audit the track record instead of trusting a claim. Admissions are hash-chained and periodically anchored to Bitcoin with OpenTimestamps. What /review covers: code diffs, shell commands, plans, config changes, agent output, trades, on-chain actions and sanctions-screening results. A verdict is a second opinion with a signed record of what was reviewed and when; it is not a guarantee that an action is correct. The 31 MCP tools also include reasoning and decisions, persistent memory, sandboxed code execution, browser actions and a marketplace. Those are supporting infrastructure; the verifier and its public track record are the product. Pricing: /verify-proof is free and needs no account. /review has free try-it calls after free registration, then pay-per-call in Lightning sats, USDC (x402 on Base) or card. Endpoint: https://api.babyblueviper.com/mcp (streamable HTTP). npm: invinoveritas-verify (offline proof verifier), elizaos-plugin-invinoveritas.