Verify, don't trust

Verify it yourself

Don't take our word for it. Download a real (synthetic) Senthex proof bundle, run the offline verifier on your own machine, and change a byte to watch the check fail. The verdict in your browser equals the verdict from our offline Python tool.

Proof, not promise

Verify it yourself

Most AI-security tools ask you to trust them. Senthex gives you a verifiable record. Below is a real (synthetic) audit bundle — change one byte and watch the cryptographic chain catch it, live in your browser.

Flip the blocked attack's score 0.86 → 0.06 — an insider trying to hide it.

A normal log

Editable. Nothing proves it wasn't changed.

{ "event": 13, "verdict": "block",
  "injection_score": 0.86 }

No integrity check — the edit is invisible. “Trust us.”

Senthex verifiable registry

A SHA-256 hash chain — signed, Merkle-committed, and externally timestamped.

"chain_ok": true·exit 0
Integrity verified

freeTSA is a public demo authority (not eIDAS-qualified); in production the timestamp is a qualified eIDAS QTSP — same mechanism. All three are checked by the offline verifier.

13 LLM calls · project acme-talent-demo
#VerdictInjectionrow hash
Maps to EU AI Act Article 12 (automatic record-keeping) & Article 19 (≥ 6-month log retention) — not Article 15.

100% synthetic data (ACME Talent GmbH). This proves integrity (an unbroken chain, not silently rewritten), origin (each checkpoint is signed with a composite Ed25519 + ML-DSA-65 key), and time (an external RFC 3161 anchor). The Merkle root commits to the set of events shown; proving none were omitted in a separate snapshot needs a cross-witness, which is deferred. Tamper-evident, not tamper-proof. The verifiable audit trail is a pilot capability (v1.1.7), not yet the published release.

Loading the proof bundle…

Download the bundle + offline verifier

A self-contained zip: the proof bundle, a one-byte-tampered copy, and a pure-Python verifier — no database, no Senthex server, no trust required. 100% synthetic data; real SHA-256 chain + a real freeTSA RFC 3161 timestamp.

Download the bundle (zip)
Re-verify it yourself (offline)

Python 3.11+ and three public libraries. Intact → chain_ok true, exit 0. Tampered → chain_ok false, exit 1.

pip install rfc3161-client cryptography httpx
cd verifier
python -m audit verify-export ../proof-bundle.json
#   -> "chain_ok": true,  exit 0
python -m audit verify-export ../proof-bundle.TAMPERED.json
#   -> "chain_ok": false, exit 1

Want a proof dossier for your own stack?

Tell us your setup and we'll send a tailored proof dossier (still synthetic data) mapped to the compliance questionnaire your buyer uses.

We use your email only to reply. No tracking, no mailing list.

This proves integrity — an unbroken chain, not silently rewritten before the timestamped anchor. It does not prove completeness or origin. Tamper-evident, not tamper-proof. freeTSA is a public demo authority (not eIDAS-qualified); in production the anchor is a qualified eIDAS timestamp (QTSP) — same mechanism. Audit-as-proof is a pilot capability (v1.1.7), not yet the published release.