Adding a Chain of Audit to Coding Agents
Funky_Chicken_22 · reddit · 2026-07-18
Starting from world-model-mcp, the author initially built a temporal knowledge graph and a constraint enforcement layer for coding agents. However, real-world projects revealed a more critical gap: verifiable decision history.
- Memory and rule enforcement alone are insufficient. Even if an agent makes a "correct decision," it's incredibly hard to independently prove what context it relied on or which rules it followed.
- To solve this, the author built Etch on top: it writes every tool call into a signed Merkle chain using a hybrid post-quantum signature.
- This allows history to be verified offline without relying on model vendors, providing both an enforcement layer and a cryptographic audit layer.
- They have signed over 16.3万 events so far, but adoption remains slow. While memory and context pain points are immediately obvious, the need for auditing usually only becomes urgent during reviews or compliance checks.
Related event: Approval and Audit Debates for Production AI Agents(6 posts)→
More from coding & agent
- Building a Secure AI Agent Gateway: Self-Hosting OAuth for Multiple SaaS Apps — Defiant_Cod_2654 · 2026-07-22
- Rowboat launches as an open-source, local-first AI coworker with memory — ycombinator · 2026-07-22
- Scoble says AI “loops” really means long-running multi-agent workspaces — Scobleizer · 2026-07-22
- Kimi Code opens a waitlist as Moonshot rolls out its coding product — Fabulous_Bonus_8981 · 2026-07-22
- Open-source runtime lets each repo define its own AI code reviewer — ibabufrik · 2026-07-22
- Indie Dev Asks: What's Actually Broken in Your AI Agent's Memory Today? — AcceptableTime7937 · 2026-07-22