Cryptographically Verifiable Runtime Integrity for Agentic AI Systems.
This repository contains reproducible experiments, exported evidence bundles, and supporting documentation for LICITRA.
- Run LICITRA core locally (see docs/how_to_run.md)
- Follow the demo walkthrough in
demo/README.md - Inspect generated JSON + PDF evidence artifacts
👉 Start here: demo/README.md
docs/- threat model, scope, and experiment methodologydemo/- reproducible demo walkthrough + exported evidence bundles (JSON/PDF)docs/experiments.md- step-by-step commands to reproduce tamper detection testsdocs/proof.md- summary of results and what each artifact demonstratesdocs/how_to_run.md- instructions to run the system locally
Included demo artifacts demonstrate:
- org1: intentional tampering detected at
bad_index - org2: remains clean (multi-organization isolation)
- JSON + PDF forensic exports
- Deterministic SHA-256 hash-chain verification
Artifacts:
demo/evidence_org1_tampered.jsondemo/evidence_org1_tampered.pdfdemo/evidence_org2_ok.jsondemo/evidence_org2_ok.pdf
- Hash-chained semantic event integrity (tamper detection)
- Multi-organization isolation (org1 chain independent from org2)
- Detection of record mutation, deletion, and previous-hash corruption
- Evidence bundles suitable for governance / audit workflows
Core implementation lives here:
https://github.com/narendrakumarnutalapati/licitra-core
The core repository contains:
- FastAPI backend
- PostgreSQL ledger implementation
- Deterministic SHA-256 chaining
- Tamper simulation endpoints
- Evidence export (JSON + PDF)
Evidence Bundle Version: 0.1-evidence
LICITRA provides cryptographic runtime integrity - not observability.
Every AI interaction becomes a chained, verifiable event.
Any historical modification breaks the chain and is detected immediately.
This is forensic-grade runtime governance for agentic AI systems.