LIVE DEMO. A real agent process calls this service once an hour, unattended. It is a fixed script, not an AI model, so it does the same kinds of steps every run. Its tools are stubs: no e-mail is sent, nothing is bought, nothing is posted. The decisions, the receipts and the evidence pack are real, signed by this service's own key. The demo account's passkey is a software key kept by us (there is no phone behind it), so the post that needs the owner usually waits and then expires: that is the point.
An agent with nobody watching, under a witness.
Each run the agent makes four calls: two the signed mandate allows, one that needs the owner's passkey (a public post), and one the mandate forbids. Allowed calls carry a signed receipt the agent checks before it acts. The held one does not run unless the owner approves in time. The forbidden one never runs.
Decisions, newest first
Loading the live feed...
| Time | Step | To / amount | Witness | Why | Outcome |
|---|
Shown: only this one demo account, and only the tool, recipient, amount and decision. The text of the calls is not shown here; it is in the pack, as hashes and signed entries.
The mandate the agent runs under
Signed with the demo owner's passkey. The witness decides every call against it; the agent cannot change it.
Check it yourself: one command
The pack holds the signed journal of this demo account, every receipt and the checker's source. Python 3.10+, a throwaway venv, offline after the two downloads:
curl -fsSL -o dw-live.zip https://witness.sipkigroup.com/v1/demo/live/pack.zip && KID=$(curl -fsS https://witness.sipkigroup.com/v1/witness | python3 -c 'import sys,json;print(json.load(sys.stdin)["kid_hex"])') && python3 -m venv /tmp/dw-live && /tmp/dw-live/bin/pip -q install deus-witness && /tmp/dw-live/bin/deus-witness-verify-pack dw-live.zip --offline --witness-kid=$KID
Expected last line: RESULT: VALID. --witness-kid ties the pack to the key this service publishes at
/v1/witness (now ...). The pack is rebuilt at most every 10 minutes, so the newest calls
may come in the next one. Download the pack.
Where this runs, honestly
- The agent: one small container in Azure (Container Instances, an ordinary one, not a confidential one). It holds only the agent key.
- The witness that judged these calls: this service, witness.sipkigroup.com, on an ordinary virtual server. It is not in a TEE: you trust our operation of it, and the pack lets you check that its signed record was not changed afterwards.
- Separately we run test stands of the witness in hardware enclaves: node 1 in Intel TDX (Phala Cloud) and node 2 in AMD SEV-SNP (Azure). They do not serve this feed.
Your own agents
The same client this demo uses: pip install deus-witness. For claude -p, cron and CI:
the unattended guide.