𝙰𝚛𝚌𝚑𝚒𝚌𝚛𝚎𝚡

《𝐀𝐜𝐭𝐮𝐦: 𝐁𝐞𝐡𝐚𝐯𝐢𝐨𝐫 𝐈𝐬 𝐭𝐡𝐞 𝐄𝐯𝐢𝐝𝐞𝐧𝐜𝐞 𝐨𝐟 𝐓𝐫𝐮𝐬𝐭》 Agents no longer just answer questions. They have started to act. They read data, call tools, change records, publish content, and move funds. And when something goes wrong, the first question is no longer “What did the AI say?” It is: Who authorized this, what did it actually do, and can any of it be proven? So merely saving the final output is not governance. The output is only the ending. The trust problem lives in the chain behind it. Recently, discussions about who is responsible when AI goes wrong have only grown louder, and the focus is quietly shifting: no longer just whether the final document was correct, but back to the specific scenario — how much autonomy the agent had at the time, whether the risk was foreseeable, whether control was real, and whether the process can actually be reconstructed. Actum breaks this test into four chains. They are not four separate ledgers, but four questions about the same action: 𝐓𝐡𝐞 𝐚𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐚𝐭𝐢𝐨𝐧 𝐜𝐡𝐚𝐢𝐧: 𝐖𝐡𝐚𝐭 𝐰𝐚𝐬 𝐢𝐭 𝐚𝐥𝐥𝐨𝐰𝐞𝐝 𝐭𝐨 𝐝𝐨? Who proposed the task, who approved it, who maintains the rules, what data could it read, what tools could it call, could it publish directly, when did temporary permission expire, and who could stop it in an emergency? A verbal instruction is not a boundary. A checkable permission is. 𝐓𝐡𝐞 𝐛𝐞𝐡𝐚𝐯𝐢𝐨𝐫 𝐜𝐡𝐚𝐢𝐧: 𝐖𝐡𝐚𝐭 𝐝𝐢𝐝 𝐢𝐭 𝐚𝐜𝐭𝐮𝐚𝐥𝐥𝐲 𝐝𝐨? Three things that are often blurred together must be kept apart: what the model suggested, what a human decided, and what the system actually executed. Retrieval, generation, tool calls, human edits, retries, and the final action all matter, because two outputs that look exactly the same can have completely different histories. One was checked against the latest price list before it was sent. The other was sent automatically from an expired cache. The files are identical. The accountability is not. 𝐓𝐡𝐞 𝐞𝐯𝐢𝐝𝐞𝐧𝐜𝐞 𝐜𝐡𝐚𝐢𝐧: 𝐂𝐚𝐧 𝐢𝐭 𝐛𝐞 𝐯𝐞𝐫𝐢𝐟𝐢𝐞𝐝 𝐚𝐟𝐭𝐞𝐫𝐰𝐚𝐫𝐝𝐬? A hash can only tell you whether data has been changed. It cannot prove that the data was true before it was recorded. Real evidence links together the original logs, the model, plugin, and knowledge-base versions in use at the time, the approval record, the API responses, and the alert history. Where a record is missing, that gap must be marked honestly, not quietly filled in by reasoning backwards from today’s configuration. 𝐓𝐡𝐞 𝐜𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 𝐜𝐡𝐚𝐢𝐧: 𝐂𝐚𝐧 𝐭𝐡𝐢𝐬 𝐫𝐞𝐜𝐨𝐫𝐝 𝐢𝐭𝐬𝐞𝐥𝐟 𝐛𝐞 𝐤𝐞𝐩𝐭 𝐭𝐡𝐢𝐬 𝐰𝐚𝐲? Recording everything, forever, creates a second problem. Customer data, access tokens, cookies, and intermediate results should not be written indiscriminately into ordinary logs. The evidence itself needs rules: which fields are kept, who can access them, how long they are retained, and when they are deleted. The authorization chain sets the boundary, the behavior chain tells the story, the evidence chain makes it verifiable, and the compliance chain guards the bottom line. This is exactly what Actum is building: a Behavioral Trust Layer for AI, where human behavior is verifiable and records are immutable. Not merely proof that an agent was once granted authorization, but proof of what it did, step by step, after it received that authorization. Trust in the next stage of AI will not belong to the agent that sounds the most confident. 𝐈𝐭 𝐰𝐢𝐥𝐥 𝐛𝐞𝐥𝐨𝐧𝐠 𝐭𝐨 𝐭𝐡𝐞 𝐚𝐠𝐞𝐧𝐭 𝐭𝐡𝐚𝐭, 𝐨𝐧 𝐭𝐡𝐞 𝐦𝐨𝐫𝐧𝐢𝐧𝐠 𝐚𝐟𝐭𝐞𝐫 𝐬𝐨𝐦𝐞𝐭𝐡𝐢𝐧𝐠 𝐠𝐨𝐞𝐬 𝐰𝐫𝐨𝐧𝐠, 𝐜𝐚𝐧 𝐬𝐭𝐢𝐥𝐥 𝐞𝐱𝐩𝐥𝐚𝐢𝐧 𝐭𝐡𝐞 𝐩𝐫𝐞𝐯𝐢𝐨𝐮𝐬 𝐧𝐢𝐠𝐡𝐭’𝐬 𝐜𝐡𝐚𝐢𝐧 𝐨𝐟 𝐚𝐜𝐭𝐢𝐨𝐧𝐬 𝐜𝐥𝐞𝐚𝐫𝐥𝐲 — 𝐚𝐧𝐝 𝐩𝐫𝐨𝐝𝐮𝐜𝐞 𝐭𝐡𝐞 𝐞𝐯𝐢𝐝𝐞𝐧𝐜𝐞 𝐭𝐨 𝐛𝐚𝐜𝐤 𝐢𝐭 𝐮𝐩.

This week, two launches tried to answer the same question. iProov's HAPS: a signed, single-use credential that proves a human approved this exact action. Change one detail — the amount, the destination — and the credential dies. World ID for Agents: a cryptographic check that a real, unique human stands behind the agent. Both are real progress. Both answer: who authorized this? Neither answers what happens next. Approval is a moment. Behavior is a trail. The credential proves the human said yes. It says nothing about the chain of actions that followed — or whether the outcome matched the intent. The industry is solving the front door. Nobody is filming the hallway. That's the gap. A verifiable record of behavior — what was done, in what order, with what result — tied back to the human who authorized it. Identity says who sent the agent. Authorization says what it was allowed to do. Behavior says what it actually did. Two of the three now have infrastructure. The third is the one we're building.