You don't have to trust the model. The chain is the proof.
Every BATEN agent decision — every score, every response, every workflow event — is cryptographically signed by ZAHIR. The causal chain is independent of the model that produced it. Even if the model is replaced, the proof survives.
SHA-256
Every decision
C1 + C2
Active patents
EU-ready
AI Act · Art. 13
∞
Chain integrity
How a decision becomes a proof
01
Agent produces a decision
A BATEN agent scores a document, generates a response, or triggers a workflow action. The output is not just text — it is a typed event with an entity ID, a timestamp, and a state transition.
▼ event emitted to ZAHIR
02
ZAHIR seals the event (Brevet C1)
The event is appended to the CertifiedJournal. A new block is produced: SHA256(parent_hash ‖ state ‖ sigma ‖ timestamp ‖ entity). The chain is append-only and tamper-evident.
→ trust_seal: a1b2c3d4…e5f6g7h8
▼ filtered by observer role
03
Each actor sees their slice (Brevet C2)
The compliance officer sees the full chain. The end user sees only their own events. The auditor can export to NDJSON for legal evidence. The global chain is never altered — only the lens changes.
▼ verifiable by anyone
04
Proof is independent of the model
The chain can be verified offline with a SHA-256 implementation. The original model can be shut down, replaced, or audited — the causal record remains intact and self-validating.
Certification across the BATEN stack
BATEN Chat
Every response, signed
Each agent message is sealed with its context, cartridge ID, and energy state. Replay any conversation with cryptographic proof of what was said and when.
BATEN Engine
Scoring chains
9-dimension XAI scores are not just numbers — each dimension is a certified event. The scoring chain is auditable, reproducible, and EU AI Act-ready.
BATEN Orchestra
Team decision log
Every attention event, every pinned item, every workflow transition becomes a certified block. Orchestra's log is the source of truth for XAI explanation.
BATEN Flow
Process integrity
Each step in a governed workflow is sealed. If a step is skipped or reordered, the hash breaks. Compliance is not a report — it is a structural property.
BATEN Shell
Action traceability
Every shell command, every agent action is certified before execution. The audit trail is built at the instruction level, not reconstructed after the fact.
Marketplace
Cartridge integrity
Every published cartridge receives a BATEN seal. The content hash is certified at submission. Any modification after publishing breaks the seal.
Trust is a property of the chain, not the model.
BATEN agents are powered by large language models — probabilistic by nature.
CERT does not eliminate uncertainty from the model. It makes every decision
traceable, reproducible, and attributable — regardless of what the model does next.
The chain is the contract. The model is the worker. Only one of them is in court.
Regulatory alignment
EU AI Act — Art. 13 TransparencyEU AI Act — Art. 17 Quality managementRGPD — Art. 22 Automated decisionsNIS2 — Incident traceabilityISO 42001 — AI audit trailSOC 2 — Event integrity
Need certification without AI? For notaires, contracts, legal archives and enterprise audit chains — visit BATENCORE, the standalone certification platform built on the same ZAHIR engine.