Odux · Internal Affairs for AI

Reconstruct the truth. Verify the evidence. Govern the spend.

Your agents make thousands of autonomous decisions a day. Internal Affairs for AI turns every one of them into a signed, tamper-evident case file — so you can answer “why did it do that?” and “what did it cost?” with proof, not guesswork.

Zero live-path latencyTamper-evidentResidency-aware

Tested against every major provider

Exhibit A · The solution

Three answers, on the record.

Every run becomes a case file you can read, trust, and act on.

Know exactly what happened, in the order it happened.

Every span, tool call, and model choice — normalized into a case file with root-cause and anomaly detection.

  • Normalized canonical traces from LangGraph, OTLP, or raw spans
  • Root-cause detection flags the exact decision that went wrong
  • Anomaly detection surfaces drift across runs
  • Architecture reconstruction from observed behavior
agent.runtool: searchmodel: gpt-4otool: db.querydecisionoutput
root cause: tool:db.query → timeout

The evidence log is tamper-evident — any alteration breaks the chain, visibly.

Each record is hash-chained and signed at ingest. When compliance asks for proof, you have it.

  • Hash-chained records signed at ingest time
  • Any edit breaks the chain — visible immediately
  • Cryptographic proof of log integrity
  • Signed evidence log, audit-ready
a3f9…b21cblock #1 · verified
7c2e…d845block #2 · verified
1b6a…f012block #3 · verified
9e4d…c733block #4 · verified
5f8c…a91bblock #5 · verified
✓ chain integrity: 5/5 blocks · no tampering detected

Spot shadow usage and audit whether a cheaper model would've done the job.

Policy verdicts, cost rollups, and reconciliation against the provider's real bill.

  • Dollar-to-decision mapping across every run
  • Reconciliation against the actual provider bill
  • Shadow spend detection — usage the bill missed
  • Policy verdicts — was this decision within budget?
cost reconciliation · monthly$156 shadow spend
$847gpt-4o
$412claude
$89mini
$156shadow
Exhibit B · The accountability gap

Autonomous agents. Zero accountability.

Agents act in the gap between the prompt and the answer. Logs are scattered, mutable, and incomplete — so when a run goes wrong, there’s no authoritative record of what actually happened.

SYMPTOM 01

Can’t answer “why”

That decision was made a week ago. The trace is gone, overwritten, or split across five different tools.

SYMPTOM 02

Can’t prove integrity

Anyone with a database login can edit the log. “Trust us” is not a compliance answer.

SYMPTOM 03

Can’t govern spend

The bill arrives, but you can’t map a dollar to a decision — or prove a cheaper model would’ve done the job.

Exhibit C · The pipeline

Observe without touching the live path.

Traces are shipped after the fact, out-of-band. Your production latency doesn’t move.

01

Instrument

LangGraph or OTLP spans, dropped in under an hour.

02

Normalize

Raw spans become one canonical trace.

03

Redact

Secrets & PII replaced before storage.

04

Sign

Hash-chained, tamper-evident evidence log.

05

Investigate & verdict

Case file, root cause, policy, and cost.

Exhibit D · Capabilities

Everything you need to hold the line.

Built for teams that ship autonomous agents and can’t afford blind spots.

Multi-tenant workspaces

Isolate every customer with its own keys, roles, and data region.

Role-based access

viewer, investigator, admin — scoped per tenant.

Redact-first ingestion

PII and secrets become [REDACTED] before anything is persisted.

Residency & retention

Pin regions; auto-expire raw traces on a schedule.

Cost reconciliation

Metered usage vs the provider’s actual bill. Shadow spend surfaces.

Anomaly & root cause

Drift detection and architecture reconstruction, built in.

Exhibit E · Trust & security

Built for the moment you have to prove it.

When an audit lands or a customer asks hard questions, you need an answer that holds up. That’s the whole point.

Signed, hash-chained evidence — tampering breaks the chain.
Redact-first ingestion — secrets and PII never reach storage.
Residency-aware — keep data where you’re obligated to.
Out-of-band observation — zero added latency to the live path.
Apache-2.0 — audit it, self-host it, or run it as a service.
OduxOdux Exhibit F · Work with us

Put your agents on the record.

Tell us what you’re running. We’ll have you instrumented and your first case file open in under an hour.

samstern@odux.io