Neutral attestation infrastructure

Cryptographically signed receipts for things you can't easily prove happened.

Route agent actions, content hashes, API checks, DNS lookups, certificates, webhooks, LLM calls, and git commits through Attestor. Get a signed receipt anyone can verify — independently, against our published keys.

Get your API key Explore the suite

Primitive 01 · Agent action relay

Sign every call your agent makes.

Route your agent's outbound HTTP through Attestor. Each request returns the destination's response plus a signed receipt of what was sent, what came back, and when.

POST /v1/call [00ms] overhead ed25519 signed

curl https://agined.com/api/v1/attestor/call \
  -H "Authorization: Bearer $ATTESTOR_KEY" \
  -d '{
    "destination": "https://api.stripe.com/v1/charges",
    "method": "POST",
    "agent_id": "billing-bot",
    "purpose": "refund_processing"
  }'

# → response + X-Attestor-Receipt header

Primitive 02 · Content notarization

Prove it existed before they say it did.

Submit a SHA-256 hash of any document, dataset, or piece of content. Attestor signs a receipt asserting the hash existed at that exact moment. No content stored, no chain to maintain.

POST /v1/notarize Hash-only never content Append-only ledger

curl https://agined.com/api/v1/attestor/notarize \
  -H "Authorization: Bearer $ATTESTOR_KEY" \
  -d '{
    "content_sha256": "sha256:7f8a9b2c...",
    "label": "Q2 financial report draft",
    "content_type": "application/pdf"
  }'

# → signed notarization receipt

Primitive 03 · API monitoring

Uptime evidence your customers can't dismiss.

Register an endpoint. Attestor checks it on schedule and signs a receipt every time, building a third-party-verified uptime log. SLA disputes resolve themselves.

POST /v1/monitors 1m–24h intervals Signed uptime log

curl https://agined.com/api/v1/attestor/monitors \
  -H "Authorization: Bearer $ATTESTOR_KEY" \
  -d '{
    "url": "https://api.acme.com/health",
    "interval": "1m",
    "expect_status": 200
  }'

# → monitor registered, receipts begin streaming

Primitive 04 · Webhook delivery

Proof you sent it. Proof they got it.

Deliver webhooks through Attestor. Each delivery attempt — successful, failed, retried — gets a signed receipt that the destination URL was contacted with the exact payload at the exact time.

POST /v1/webhooks/deliver Auto-retry with backoff Payload hash signed

curl https://agined.com/api/v1/attestor/webhooks/deliver \
  -H "Authorization: Bearer $ATTESTOR_KEY" \
  -d '{
    "destination": "https://customer.example/hook",
    "payload": { "event": "order.completed", "id": "ord_123" },
    "max_retries": 5
  }'

# → delivery receipts for every attempt

Primitive 05 · DNS attestation

An auditable record of what DNS said, when.

Schedule DNS lookups against any domain. Attestor queries multiple resolvers, signs a receipt with the consensus answer. Useful for SPF/DMARC compliance, ownership history, security forensics.

POST /v1/dns/watch Multi-resolver consensus A · MX · TXT · CNAME

curl https://agined.com/api/v1/attestor/dns/watch \
  -H "Authorization: Bearer $ATTESTOR_KEY" \
  -d '{
    "domain": "example.com",
    "records": ["A", "MX", "TXT"],
    "interval": "1h"
  }'

# → signed snapshots of DNS state over time

Primitive 06 · Certificate attestation

Independent record of every TLS handshake.

Attestor performs TLS handshakes against your domains on schedule and signs the resulting certificate chain. Useful for compliance evidence, post-incident forensics, and rotation tracking.

POST /v1/tls/watch Full chain captured Issuer · SAN · validity

curl https://agined.com/api/v1/attestor/tls/watch \
  -H "Authorization: Bearer $ATTESTOR_KEY" \
  -d '{
    "host": "acme.com:443",
    "interval": "6h"
  }'

# → signed cert chain attestations

Primitive 07 · LLM output attestation

Receipts for what a model said, exactly.

Route your LLM calls through Attestor. Each completion gets a signed receipt binding the model, prompt hash, and response hash to a moment in time. Critical for regulated AI use.

POST /v1/llm/attest Any provider Anthropic · OpenAI · Google Prompt+response hashed

curl https://agined.com/api/v1/attestor/llm/attest \
  -H "Authorization: Bearer $ATTESTOR_KEY" \
  -d '{
    "provider": "anthropic",
    "model": "claude-opus-4-7",
    "prompt_sha256": "sha256:a1b2c3...",
    "response_sha256": "sha256:d4e5f6..."
  }'

# → signed LLM attestation

Primitive 08 · Commit attestation

Notarize every commit, as it lands.

A GitHub Action or git hook submits commit metadata to Attestor. Each commit hash, tree, and author signature gets a third-party attestation — useful for IP timing, open-source attribution, audit chains.

POST /v1/commits/attest GitHub Action installable Tree · author · sig

# .github/workflows/attestor.yml
- uses: attestor/attest-commit@v1
  with:
    api_key: ${{ secrets.ATTESTOR_KEY }}
    project: acme/core

# Each push produces signed commit attestations.

The thesis

The party that operates the action shouldn't operate the audit log.

Every attestation tool today is run by the same entity whose actions it audits. That works for internal debugging. It doesn't work when the audit needs to be credible to someone else.

What makes Attestor structurally neutral

Attestor operates no backend application server. The relay runs on Cloudflare's edge with the signing key sealed inside Cloudflare's HSM-backed secrets — we cannot read it, export it, or use it outside the Worker. Receipts go into an append-only database table with no UPDATE or DELETE permission for any client.

Verification requires no contact with our servers. The public key is published. The verification library is published. The receipt format is a versioned spec. Anyone can verify any receipt for themselves — all it takes is ed25519.

The relay runs inside the Agined platform, whose source is proprietary to Avonao, Inc.. Verification never depends on it: any ed25519 implementation can check a receipt against the published key.

Your agent→Attestor relay→Destination
Attestor relay→ed25519 sign→Receipt
Receipt→Append-only DB→Read-only view
Anyone→Public key→Verify

No backend service we operate. No tampering surface. No trust required beyond ed25519.

The suite

Eight primitives. One signing key. One verification surface.

Each primitive applies the same trust architecture to a different domain. Pick what you need — bundled pricing means you don't pay per service.

PRIMITIVE 01 / AGENT.CALL

Agent action relay

Route any HTTP call your agent makes through the Attestor relay. The destination receives the same request it would have received directly; you get back the response plus a signed receipt of what happened.

What gets attesteddestination URL, HTTP method, status code, request and response body hashes, timing, agent_id, and the moment it happened

[00ms] overheadstreams responsesno body stored

agined.com/api/v1/attestor/callPOST

POST /v1/call
Authorization: Bearer atst_••••
Content-Type: application/json

{
  "destination": "https://api.example.com/data",
  "method": "POST",
  "headers": { "X-Foo": "bar" },
  "body": "{\"q\":\"orders\"}",
  "agent_id": "prod-agent-01",
  "purpose": "daily_sync"
}

→ 200 OK
X-Attestor-Receipt: eyJ2ZXJzaW9uIjox...

PRIMITIVE 02 / CONTENT.NOTARIZE

Content notarization

Submit a SHA-256 hash of any content. Attestor signs an attestation that the hash existed at a precise moment, with a label and content-type. The content itself never leaves your machine — only its hash reaches Attestor.

What gets attestedcontent hash, label, content-type, byte size (if provided), and the exact UTC timestamp of notarization

hash-onlyno upload requiredprior-art ready

agined.com/api/v1/attestor/notarizePOST

POST /v1/notarize
Authorization: Bearer atst_••••

{
  "content_sha256": "sha256:7f8a9b2c1d3e...",
  "label": "Q2 strategy doc v3",
  "content_type": "application/pdf",
  "size_bytes": 142887
}

→ signed notarization receipt
  receipt_id: 01H8X4P9R7Z2...
  issued_at: 2026-05-14T15:42:11.234Z

PRIMITIVE 03 / MONITOR.HTTP

API monitoring

Register a URL and an interval. Attestor checks it on schedule from the edge and signs a receipt for every check. The result is a third-party-verified uptime log you can hand to a customer, auditor, or insurance underwriter.

What gets attestedURL, expected status, actual status, response time, response body hash, and the timestamp of every check

1m to 24h intervalsSLA-grade evidencemulti-region

agined.com/api/v1/attestor/monitorsPOST

POST /v1/monitors
Authorization: Bearer atst_••••

{
  "url": "https://api.acme.com/healthz",
  "method": "GET",
  "interval": "1m",
  "expect_status": 200,
  "label": "production-api"
}

→ monitor_id: mon_01H8X4P9R7Z2
→ receipts now stream into your account

PRIMITIVE 04 / WEBHOOK.DELIVER

Webhook delivery attestation

Submit a webhook payload and destination. Attestor delivers it (with retries, with backoff) and signs a receipt for every attempt — success or failure. Useful when "did the webhook fire" becomes a billable dispute.

What gets attesteddestination URL, payload hash, attempt number, response status, retry timing — for every delivery attempt

auto-retryexponential backoffdelivery proof

agined.com/api/v1/attestor/webhooks/deliverPOST

POST /v1/webhooks/deliver
Authorization: Bearer atst_••••

{
  "destination": "https://customer.example/webhook",
  "payload": {
    "event": "invoice.paid",
    "id": "inv_8X4P9R"
  },
  "max_retries": 5,
  "retry_strategy": "exponential"
}

→ receipts for every delivery attempt

PRIMITIVE 05 / DNS.WATCH

DNS attestation

Watch a domain's DNS records over time. Attestor queries multiple public resolvers, captures the consensus answer, and signs a receipt at every interval. Builds a tamper-evident history of who pointed where, when.

What gets attestedqueried records (A, AAAA, MX, TXT, CNAME, NS), resolver consensus, TTLs, and the moment of query

multi-resolverall common record typesSPF / DMARC ready

agined.com/api/v1/attestor/dns/watchPOST

POST /v1/dns/watch
Authorization: Bearer atst_••••

{
  "domain": "example.com",
  "records": ["A", "MX", "TXT"],
  "resolvers": ["1.1.1.1", "8.8.8.8", "9.9.9.9"],
  "interval": "1h"
}

→ watch_id: dns_01H8X4P9R7Z2
→ DNS snapshots signed and stored

PRIMITIVE 06 / TLS.WATCH

Certificate attestation

Schedule TLS handshakes against your domains. Attestor captures the full certificate chain at every check and signs a receipt — providing an independent record of cert issuance, rotation, and validity periods.

What gets attestedcertificate chain, issuer, subject alternative names, validity period, fingerprints, and the moment of handshake

full chain capturedexpiry trackingrotation evidence

agined.com/api/v1/attestor/tls/watchPOST

POST /v1/tls/watch
Authorization: Bearer atst_••••

{
  "host": "acme.com",
  "port": 443,
  "sni": "acme.com",
  "interval": "6h"
}

→ watch_id: tls_01H8X4P9R7Z2
→ certificate snapshots signed and stored

PRIMITIVE 07 / LLM.ATTEST

LLM output attestation

Route LLM calls through Attestor, or submit completion metadata directly. Each completion receives a signed receipt binding the provider, model, prompt hash, and response hash to a precise moment. Audit-grade evidence for AI-driven decisions.

What gets attestedprovider, model identifier, prompt hash, response hash, token counts, and the moment of completion

vendor-neutralregulated-AI readyprompt+response hashed

agined.com/api/v1/attestor/llm/attestPOST

POST /v1/llm/attest
Authorization: Bearer atst_••••

{
  "provider": "anthropic",
  "model": "claude-opus-4-7",
  "prompt_sha256": "sha256:a1b2...",
  "response_sha256": "sha256:d4e5...",
  "input_tokens": 2140,
  "output_tokens": 812
}

→ signed LLM attestation receipt

PRIMITIVE 08 / COMMIT.ATTEST

Commit attestation

Install the GitHub Action or run the git hook. Every push submits commit metadata to Attestor, producing a signed third-party record of authorship, tree, and timestamp. Useful for IP timing, attribution evidence, and audit chains.

What gets attestedcommit hash, tree hash, parent hashes, author signature, commit message hash, and the moment of attestation

GitHub Actiongit hookattribution evidence

.github/workflows/attestor.ymlYAML

name: Notarize commits
on: [push]
jobs:
  attest:
    runs-on: ubuntu-latest
    steps:
      - uses: attestor/attest-commit@v1
        with:
          api_key: ${{ secrets.ATTESTOR_KEY }}
          project: acme/core

# Every push → signed commit receipt

Pricing

One plan covers every primitive.

Calls across all eight services count toward one monthly bucket. No per-product subscriptions. No per-seat charges. Plans are billed in US dollars through Avonao Billing and renew monthly until you cancel; refunds follow section 7.5 of the Terms of Service.

Free

$0 / month

For evaluating the suite and small personal projects.

1,000 receipts / month across all primitives
7-day receipt retention
Public verification of every receipt
One API key
Community support

Start free

Starter

$19 / month

Core attest primitives for small production workloads.

25,000 receipts / month
30-day receipt retention
Top-ups + auto-overage
API key rotation (primary + secondary)
Email support

Start with Starter

Pro

$49 / month

All primitives plus compliance exports for production.

100,000 receipts / month
90-day receipt retention
Compliance exports (JSON, NDJSON)
Up to 10 API keys
Email support

Choose Pro

What people ask first.

A receipt proves that Attestor observed a specific event at a specific moment and signed an attestation of its characteristics with a key we cannot access. It does not prove the event was correct, authorized, or sensible — only that it happened as recorded. The notary analogy holds: a notary attests that you signed a document in their presence, not that the document is true.

They shouldn't need to. The receipt format is a versioned spec and the public keys are published, so any ed25519 implementation can check a receipt without our code. The signing key is HSM-isolated; even the operator cannot read it. The verification library runs entirely in your environment. Trust ed25519, not us.

The relay forwards headers as-is to the destination without inspecting them, and never stores them. Only the destination URL, method, hashes of the request and response bodies, and timing are kept. Your Authorization headers, cookies, and any other auth material pass through and disappear.

Existing receipts remain verifiable forever — verification requires only the public key, which is published in multiple places. New calls during the outage will fail and your agent should fall back to direct destination calls. Service status is published at /status; the self-serve plans carry no uptime commitment, and Enterprise availability is agreed in a signed order. The underlying Cloudflare Workers network has its own reliability characteristics.

Observability platforms instrument your code and store the resulting logs in your own account — useful for internal debugging, but not credible to an outside party, because you control both the agent and the log. Attestor produces third-party signed receipts that anyone can verify independently. Different category of product.

Partly. The receipt-format specification and the public keys are published, and the verification libraries are being prepared for npm and PyPI. The relay that signs receipts runs inside the Agined platform, whose source is proprietary to Avonao, Inc.; verifying a receipt never requires it.

We have not yet published measured median and P95 figures; we will once the relay runs in production. The overhead is one signature plus one storage write, performed at the Cloudflare edge. Scheduled primitives (monitors, DNS, TLS) run on Cloudflare Cron Triggers and add no latency to your stack — they run independently.