AI Agent
halo-record
Tamper-evident runtime records for AI agents: hash-chained audit trail that vendors cannot edit.
halo-record
What is halo-record?
An open-source tool that creates append-only, hash-chained logs of AI agent actions, enabling any party to verify the log was never altered without trusting the producer.
halo-record vs Similar AI Tools
| Pricing Model | Free, Custom Pricing | Free | Free, Free Trial | Free, Paid |
| Free Credits | ||||
| Key Features |
|
|
|
|
| Pros |
|
|
|
|
| Cons |
|
|
|
|
| Best For |
|
|
|
|
How to use halo-record?
- 1Install with pip install halo-record.
- 2Wrap your agent's entrypoint with trace(run_my_agent, profile='my-agent', log='audit.jsonl').
- 3Generate a report with halo report audit.jsonl -o report.html.
- 4Serve gated reports with halo serve ./records --port 8721.
- 5Verify integrity with halo verify audit.jsonl.
halo-record Key Features
- Zero runtime dependencies, only standard library.
- Hash-chained records for tamper evidence.
- Opt-in witness for completeness verification.
- Supports multiple agent frameworks via adapters (LangChain, OpenAI Agents SDK, etc.).
- Redacts sensitive data from records.
- Produces self-verifying HTML Runtime Reports.
halo-record Use Cases
- Providing verifiable audit trails for AI agents to customers and security teams.
- Meeting compliance requirements like SOC 2, EU AI Act, and OWASP GenAI guidelines.
- Internal debugging and forensic analysis of agent behavior.
- Proving agent integrity during security reviews and assessments.
halo-record Pricing & Free Credits
halo-record currently operates on a Free, Custom Pricing model.
Free Tier
Open Source (Self-Hosted)
Free
Apache-2.0 license, full functionality for self-recording and verification.
Paid Plans
Hosted Witness
Contact for Pricing
Early access for a recognized witness service to enable customer-trusted completeness proofs.
halo-record Pros & Cons
Pros
- Open source and auditable (~4300 lines of Python).
- No network calls by default; sensitive data stays local.
- Easy integration with popular AI frameworks.
- Hash chain ensures tamper evidence without trusted third party.
Cons
- Cannot prove completeness without an external witness.
- Redaction is best-effort; raw inputs could leak if not configured properly.
- Primarily Python-focused; TypeScript version available but less mature.
What is halo-record best for?
- AI agent developers needing audit trails
- Compliance and security teams
- Vendors providing AI agent services to enterprises