An agent that can approve its own work is not governed, however well it is logged. IntelliChain gives every task a named human owner who is the only one able to approve, deny or send back any part of it. The agent proposes a plan, declares the tools each step will use and executes only what was approved. Every ruling is anchored to a ledger that cannot be rewritten, so oversight is evidence rather than an assurance.
Automation moved faster than the ability to answer for it. When an agent changes a record, a device trips a threshold, or a model makes a call, the evidence usually lives in the same database the system controls, so it can be changed, and nobody can tell.
An application log is written by the system it is meant to hold to account, and can be edited by anyone with database access. It is a description of events, not evidence of them.
When an agent runs unattended, approval is implicit and diffuse. Afterwards there is no way to point to the person who authorised a specific step, or to show what they were shown.
Without an independent time anchor, a record written after the fact looks identical to one written at the time. Reconstructed history and real history are indistinguishable.
CAP, the Chain of Accountable Provenance, is the governance model. The person who creates a task owns it, and is the only one who can approve, deny or send back any part of it. There is no global approval tier and no all-powerful administrator who can wave work through.
The agent decomposes the task into a plan, plan-tasks and actions, each action declaring the tools it will use, so the owner approves not just what but how. Every ruling is anchored and bound to the key that signed it. A denied step sends the agent back with the previous version kept on-chain, so the whole negotiation survives.
IntelliChain runs a private, permissioned blockchain. Each customer project is placed in its own isolated group with its own ledger, so no project can read or write another's records, and none of it is public.
The obligations IntelliChain was designed around, and what answers each one.
Automatic logging across the system's lifetime, traceable to a degree appropriate to its risk. Each entry is anchored by checksum when it is written and chained by parent hash, so any later alteration breaks verification for everything downstream.
Output a deployer can interpret and use appropriately. Each action declares the tools it will use before it runs, and the plan the owner approved is anchored alongside the result, so what was authorised and what happened are the same record.
A natural person must be able to oversee, intervene and override. CAP makes the task owner the only party who can approve any step, and binds each ruling to the key that signed it. Oversight is a gate the work cannot pass without, not an alert once it has already run.
The same anchoring model governs anything that acts on your behalf, whether the actor is a piece of software, a device in the field, or a model making a judgement call.
Business platforms where records change constantly and an auditor eventually asks who changed what, when, and on whose authority.
Sensor networks and controllers whose readings drive real decisions, and whose history is worth exactly as much as its integrity.
LLM-driven systems that plan and act. The reason IntelliChain exists: work that is genuinely autonomous still needs a human answerable for it.
Five steps, all signed by the caller's own key. A caller with no resolvable chain identity is refused , nothing is ever signed on someone else's behalf.
The project gets a group and its own ledger, deployed by its own owner key.
Each user is issued a chain identity and registered on the contract by an existing admin.
A cryptographic checksum of the canonical payload is written against a data_id, signed by the acting user.
Recompute the checksum later and compare. A match proves the record is unaltered.
Hand an auditor the hash, transaction, block and signer for one record, without opening the rest.
Governance software that overstates itself is worse than none, because people rely on a guarantee that was never there. So we are precise about the boundary.
No tier withholds part of the record. You choose the level of isolation and the scale you need.
Shared infrastructure with an isolated group and dedicated ledger per project.
Dedicated instance and chain for one customer, managed by us.
Provision a project, issue chain identities to your team, and start anchoring. The console gives you the ledger, the explorer and the full audit trail.