Industries · AI-native software
Your agent shipped. Now prove what it did.
This is the one vertical where CHP is demonstrable today, not aspirational. If a review is blocking your agent rollout on “we can't show what it did,” this closes the gap in one command.
Read the essay: “The security review that stalls your agent” →The pain
You put an agent into a real workflow. It reads files, runs commands, calls tools, makes changes. When something goes wrong — or before it ships — someone asks what it actually did. Logs are scattered, partial, and not trustworthy as a record.
The trigger
A security or platform review gates the launch: “How do we know what the agent did, and that it was permitted to do it?” Today there is no clean answer, so the rollout stalls.
Who owns it
The platform or AI engineering lead shipping the agent — and the security reviewer who has to sign off. Both need the same thing: a replayable, trustworthy record.
What CHP does
chp hooks install captures every tool call as a typed, SHA256-chained evidence event. Replay any session by ID, see denials as first-class outcomes, and export the whole trace to your existing observability stack.
The demonstrated trace
One agent action, as evidence.
Every captured tool call produces a record like this: stable capability ID and version, the host, the correlation that ties it to the session, an explicit outcome, and an assurance level. It is queryable and replayable — the thing a reviewer can actually trust.
See how the capture works →{
"event_id": "evt_8f3a1c",
"event_type": "execution_completed",
"invocation_id": "inv_session_abc_001",
"capability_id": "payments.transfer",
"capability_version": "1.0.0",
"host_id": "my-host",
"correlation": { "correlation_id": "session-abc" },
"sequence": 2,
"timestamp": "2026-06-03T00:14:22.104Z",
"outcome": "success",
"payload": { "duration_ms": 43 },
"redacted": true,
"assurance": { "level": "S1" }
}Unblock the review this week.
Install the hooks against a real agent session, replay it, and hand the reviewer a record they can verify. If you want hosted retention or team access on top, that is what we build with design partners.