v0.1.0-preview.9 · MIT · .NET 8

Prove what your AI did.

Tamper-evident audit records for AI decisions in .NET. SHA-256 hashing, hash chaining, and RSA signatures — so you can verify it later.

dotnet add package AiTrace --prerelease

View docs

Open source No external service Thread-safe

// 1. Register in ASP.NET Core
builder.Services.AddAiTrace(o =>
{
    o.StoreContent  = true;
    o.BasicRedaction = true;
});

// 2. Inject and log a decision
public class DecisionService(
    IAuditStore store)
{
    public async Task LogAsync()
    {
        await store.LogDecisionAsync(
            new AiDecision
            {
                Prompt  = "Summarize the contract.",
                Output  = "The contract covers...",
                Model   = "gpt-4o",
                UserId  = "user-42"
            });
    }
}

How it works

A proof layer on every AI call

Hash

Each decision is hashed with SHA-256. The hash covers timestamp, model, user ID, prompt, and output.

Chain

Every record stores the hash of the previous one. Remove or alter any record and the chain breaks permanently.

Sign PRO

Sign each record with your RSA private key for non-repudiation and independent third-party verification.

Verify

Run chain verification at any time. AiTrace detects tampering, missing files, and broken chains instantly.

Features

Everything in the core package is free

Immutable JSON Records

Every audit record is a plain JSON file in a local folder you control. No database, no external service.

SHA-256 Hash Chaining

Records are cryptographically linked. Any retroactive modification to any record is immediately detectable.

ASP.NET Core DI

One call to AddAiTrace(). Inject IAuditStore anywhere in your app.

RSA-SHA256 Signatures Pro

Sign records with your private key. Regulators and clients can independently verify with your public key.

Compliance Reports Pro

Generate text and JSON reports summarizing integrity, signature validity, and time range covered.

Evidence Bundles Pro

Export a sealed, self-contained audit trail snapshot with a SHA-256 bundle hash. Built for legal review.

AiTrace.Pro

For teams that answer to regulators

✓

RSA-SHA256 Signatures

Non-repudiation for every decision record

✓

Compliance Reports

Text and JSON — regulator-ready output

✓

Evidence Bundles

Sealed, portable audit trail snapshots

✓

Bundle Sealing

SHA-256 fingerprint of the entire bundle

✓

Audit Diffing

Compare two bundles with CI-ready exit codes

✓

FailOnMissingFiles

Enforce append-only policies on audit dirs

# Install Pro
dotnet add package AiTrace.Pro --prerelease

# Verify a chain
var result = await verifier
    .VerifyChainAsync("./aitrace");

# Export evidence bundle
var bundle = await exporter
    .ExportBundleAsync("./aitrace");

# Seal the bundle
EvidenceBundleSealer
    .WriteSeal(bundle.Path);

# Verify seal integrity
var (ok, reason) =
    EvidenceBundleSealer
        .VerifySeal(bundle.Path);