Skip to content
Governance and replay

Logs tell you what the agent said it did. The ledgers record what actually happened.

One causal history per session: the host ledger and the guest transcript reconcile by sequence number before the agent wakes.

Scope and operating details

One causal history per session: host ledger and guest transcript reconcile by sequence number, and the reconciliation is recorded before the agent wakes. Deterministic full-run replay is roadmap.

AttemptRetain the execution record
ReviewInspect events and checks
AccountTrace attempts and their costs
Illustrative workflow. The evidence and limitations below define the tested scope.
The flight recorder

Audit trails with sequence lineage: every event names its parent, and the two ledgers of one history reconcile by sequence number on every resume. These historical tests do not establish a complete staff-access audit trail or deterministic full-run replay.

full-run replay · roadmap

Re-executing a whole run deterministically has no gate yet and is not claimed. The gateway already replays interrupted calls from its store.

sequence lineage

Every event names its parent checkpoint, so order is provable rather than asserted.

audit bundle · roadmap

A signed archive scoped to sessions and range. No export path exists yet.

Enterprise SSO and region selection are planned. The published retention policy is in force; automatic expiry has an implementation gap.

A log is the agent's account of itself, written by the thing under investigation. KeepState keeps two ledgers of one history instead: the host event log and the in-guest transcript, reconciled by sequence number before the agent wakes. Every event carries the checkpoint it descended from. That lineage is what a future replay verb will be built on; until that verb has a gate, full-run replay is roadmap, not a claim.

Pre-steer request bodies

byte-identical MEASURED

across three forked branches. Full-run deterministic replay has no gate and is not claimed.

evidence
badge
MEASURED
measurement
byte-identical · across three forked branches. Full-run deterministic replay has no gate and is not claimed.
test scope
Laboratory or bench evidence; production behavior is not inferred from it.
date
29 July 2026
public summary
Historical branch-isolation and steering test

Event lineage depth

full MEASURED

every event names its parent checkpoint

evidence
badge
MEASURED
measurement
full · every event names its parent checkpoint
test scope
Laboratory or bench evidence; production behavior is not inferred from it.
date
29 July 2026
public summary
Historical branch-isolation and steering test

Retention policy

v1.0, final

Deleting a session erases the content only it held, in production since 6 October 2026. No automatic expiry is established, and legal holds are not supported.

Lineage is gated: every event names its parent and the two ledgers reconcile by sequence. record

Give your auditors two ledgers that agree.

Sequence lineage today. Full-run replay: roadmap, labeled as such. The retention and deletion policy is published as final, v1.0.

Sign up Read the docs

keepstate.ai · the durable agent session cloud