Sigmodx is audit infrastructure for AI agents.
Sigmodx is audit and verification infrastructure for AI agents, providing cryptographically verifiable, append-only evidence of agent decisions and execution.
Start with GL entry review or read the audit trail walkthrough.
Sigmodx and EmbiPay are different products
Autonomous AI agents can use both products. EmbiPay answers whether an agent may perform an economic action. Sigmodx answers what the agent did, what evidence exists, and whether that execution can be independently verified. cinmon-control turns Sigmodx reliability state into policy before EmbiPay moves money.
Audit and verification
Sigmodx
What did the agent do, and can that execution be independently verified?
Sigmodx is audit and verification infrastructure for AI agents, providing cryptographically verifiable, append-only evidence of agent decisions and execution.
Policy enforcement
cinmon-control
What execution caps apply before the agent acts?
cinmon-control is the policy enforcement layer. It reads agent reliability state from Sigmodx and maps ALLOW, LIMIT, and BLOCK to execution caps. If Sigmodx is unreachable, it defaults to BLOCK.
Economic control plane
EmbiPay
Can this agent perform this economic action?
EmbiPay is the economic control plane for autonomous AI, providing governed economic execution, capital limits, approvals, and transaction controls for AI agents. Official site: https://embipay.com.
AI agents are making financial decisions. Most of them have no audit trail.
Public companies are deploying AI agents to approve invoices, flag anomalies, generate forecasts, and execute transactions. SOX was written for humans. There is no established standard for how an auditor verifies that an AI agent's financial decisions were governed, logged, and controlled.
Sigmodx provides the infrastructure layer that makes AI agent decisions auditable. Every decision is recorded with a cryptographic fingerprint. Every state change has an immutable reason. Every attestation can be independently verified from a single verification string.
Built on append-only storage, deterministic scoring, and cryptographic attestation. Not promises.
Built for the audit, not just the product
Append-Only Audit Trail
Every agent decision, state change, and attestation is written once and cannot be modified. Enforced at the database layer, not the application layer.
Cryptographic Attestation
Each attestation carries a SHA-256 report hash and optional HMAC signature. Any third party can independently verify the record from the hash alone.
Independent Verification
Public verification endpoints allow auditors to reproduce scores, confirm hashes, and validate attestations without system access.
Enterprise and institutional access
Private organization mode with tenant isolation, role-based access controls, evaluation cutoff enforcement, SOC 2 controls mapping, and exportable compliance evidence. Built for teams that need to show their auditors something real.