Current State — April 2026
The legacy designation ADR (Agent Decision Record) v0.1 is deprecated. The current standard is AgDR v1.8 (Atomic Genesis Decision Record) with the enforcement layer Atomic Kernel Inference (AKI). Full specification: accountability.ai AgDR Protocol.
Core Architecture
Atomic Kernel Inference (AKI)
- Capture Point: Exact inference instant (the "i" point), before any external I/O
- Guarantee: One mathematically indivisible kernel transaction — the entire record is either fully committed or never exists
- Latency: 0.62–0.95 µs end-to-end sealing time (Phoenix v1.8 benchmark)
- Output: Cryptographically sealed AgDR record with BLAKE3 hash and Ed25519 signature
Formal Definition of AKI
The AtomicInferenceCapture operation is defined as:
AtomicInferenceCapture(
ctx: InferenceContext,
reasoning_trace: ReasoningTrace,
output: ModelOutput,
ppp_triplet: PPPTriplet,
human_delta_chain: HumanDeltaChain
) → CommittedAgDR {
// 1. Concatenate all components in canonical order
payload = canonical_encode(ctx, reasoning_trace, ppp_triplet, human_delta_chain, output);
// 2. Compute BLAKE3 hash of payload
record_hash = BLAKE3_256(payload);
// 3. Sign hash with Ed25519 private key (secure enclave)
signature = Ed25519_sign(record_hash, private_key);
// 4. Append to forward-secret Merkle chain
merkle_root = Merkle_append(record_hash, previous_root);
// 5. Return committed record with cryptographic proofs
return AgDR {
payload_hash: record_hash,
signature: signature,
merkle_root: merkle_root,
timestamp_ns: monotonic_clock_ns(),
kernel_version: "Phoenix v1.8"
};
}
Every AgDR record is cryptographically bound to its inference context, PPP Triplet, and Human Delta Chain. Tampering with any component invalidates the BLAKE3 hash and Ed25519 signature, providing mathematical proof of integrity. Reference: accountability.ai AKI Formal Definition.
Cryptographic Components
| Component | Algorithm | Purpose | Reference |
|---|---|---|---|
| Record Hash | BLAKE3-256 | Content integrity verification; collision-resistant fingerprint | accountability.ai spec |
| Signature | Ed25519 | Authenticity and non-repudiation; public-key verification | accountability.ai spec |
| Chain Integrity | Forward-secret Merkle | Temporal ordering and tamper-evidence across records | accountability.ai spec |
| Key Management | Hardware enclave (SGX/SEV) | Secure private key storage; isolation from host OS | accountability.ai guide |
Evidentiary Properties
AgDR v1.8 records satisfy statutory authentication requirements through:
- Contemporaneous Capture: Sealing occurs at inference instant, satisfying CEA s.31.1 "system integrity" presumption
- Cryptographic Proof: BLAKE3 + Ed25519 provide independently verifiable integrity without trusted third parties
- Forward-Secret Chaining: Merkle structure prevents retroactive tampering; each record's validity depends on all prior records
- Human Delta Integration: Interventions are cryptographically bound to the original decision, preserving audit trail completeness
Full statutory mapping: accountability.ai CEA s.31.1 Compliance.
Ready to implement AgDR v1.8 in your system?