Open source · Python and Rust · v0.7.0
Decisions about AI evidence that anyone can recheck.
Before an AI agent pays, lends or acts, the Gravit Verifier decides what its claim may be called. Only signed, independent and fresh evidence makes it a Verified Fact. Every decision is a record that anyone can reproduce, byte for byte, without asking or trusting us.
A claim is never promoted beyond its evidence. A claim that asks for more gets DEGRADED, with the reason written down.
Plans
The verifier is open source (Apache-2.0) and free to run yourself. The hosted service starts free in one minute; upgrade whenever you need more. One check is one API call that decides one claim or one AI agent action. Prices in Swiss francs per 30 days, paid in the stablecoins USDC or USDT, or in Bitcoin, straight to the Foundation's own wallet; no VAT is charged (the Foundation, a Swiss association, is not VAT registered).
Free
For developers trying it out
- 1,000 checks per month
- Everything listed below under Included in every plan
- Ready-made SDK, one command to install: Python and TypeScript, with a 5-minute quickstart
- Community support
Pro
about USD 8.50 / EUR 7.55
LAUNCH PRICE Pay for a year: CHF 5 a month, CHF 60 a year (save 29 %)
For teams running AI agents in real use
- 100,000 checks per month
- Everything in Free
- Priority email support from the people who build the verifier
- Help to write your first policy for the Capability Gate
Enterprise
about USD 182 / EUR 162
LAUNCH PRICE Pay for a year: CHF 120 a month, CHF 1,440 a year (save 20 %)
For banks, payment firms and regulated teams
- 10,000,000 checks per month
- Everything in Pro
- Conformance testing: we run the published test vectors against your own implementation and give you a signed report
- Integration support for your systems
Custom
For institutions, platforms and public bodies
- Volume and terms built around you
- The verifier on your own servers or in your cloud
- Independent second operator for Verified Facts
- Your own rule packs and integrations
- Regulatory mapping (EU AI Act, MiCA) and audit support
- Agreed service levels and a named contact
Included in every plan, also Free
A decision you can defend
Every check says what the claim may be called: Verified Fact, Probabilistic Assessment or Speculative Claim, with the reason, the rules applied and every piece of evidence that was rejected and why. Many weak or dependent signals never add up to a Verified Fact.
Graviteron: how strong is the evidence?
Next to the decision, a number from 0 to 1 for how strongly the evidence supports the claim, and a second number for how much evidence stands behind it. Tested on real stablecoin market data. How it works
Receipts nobody can fake
Every answer carries a receipt signed by the service and chained to your previous ones. Your auditor checks the whole history offline with the SDK, without access to us; deleting or changing one entry is detected. One call exports it all.
A public log we cannot rewrite
Every night all receipts of all customers are sealed in one public record, and three independent time authorities (DigiCert, Sectigo, GlobalSign) confirm when. So even we cannot quietly remove a receipt later. Today's seal
Correction, 26 Oct 2026: the nightly seals of 22 to 25 October 2026 were missed during our server move. No receipt was lost; the next seal covers all of them.
Capability Gate for AI agents
Tell your agent what it may do, what needs proof first and what is forbidden. Anything not listed is blocked. A risky action, such as a payment, goes through only with a Verified Fact about that exact action. See the example
Open and checkable
The rules are an open specification at the IETF, the code is open source, and 54 public test vectors let anyone check that the service decides exactly as the code says. Try it in your browser
USD and EUR amounts are approximate, at the ECB rate of 16 October 2026; you always pay the CHF price.
What comes next
Target dates, not promises: we publish a date when the work is under way, and we say so openly if it moves.
| Target | What |
|---|---|
| Done, 27 Oct 2026 | Pay with the stablecoins USDC (Ethereum, Base) and USDT (Ethereum) |
| Done, 27 Oct 2026 | Pay with TON |
| Moved, date to follow | Pay with the Swiss franc and euro stablecoins CHFAU and EURAU. Planned for 29 Oct 2026 together with USDC, USDT and TON; we moved it to add each token only after checking its contract and reserves. |
| November 2026 | Pay by card |
| December 2026 | Gravit app you install from this site on phone and desktop: check receipts offline by scanning a QR code, the verifier sandbox, your key, usage and plan |
| Q1 2027 | The app in the App Store, Google Play, Microsoft Store and Mac App Store |
New verification services
Stablecoin monitor
Is the token at par on every venue, and does the supply match the reserves? Daily, verifiable reports.
DeFi pool verification
Every swap and every reserve of a liquidity pool recomputed from the public ledger, as we did for a Solana protocol.
Proof of reserves check
On-chain supply set against the reserves an issuer attests, by independent operators.
Records nobody can rewrite
Any company log sealed with timestamps from independent authorities, powered by History Keeper.
AI agent audit
Capability Gate for popular agent frameworks: what the agent may do, and proof of what it did.
Company formation checks
Gravit Path: documents for a new company checked against dated official rules before filing.
For organisations, through our sales team
Ready-to-run server
A dedicated server with the verifier, the receipt log and a second operator pre-installed, started as one package.
White label
Offer the verifier to your customers under your own brand, with our engine and updates behind it.
Integration and training
We connect the verifier to your systems and train your team. our contact form
Security and standards
We build on open, published standards, and we say exactly which ones and how far we are. Nothing here is a certification.
| Standard | What we use it for | Today |
|---|---|---|
| Ed25519 (RFC 8032) | Signatures on every decision and receipt | IN USE |
| SHA-256, SHA3-256 (FIPS 180-4, FIPS 202) | Fingerprints of inputs and decisions | IN USE |
| Certificate Transparency Merkle trees (RFC 9162) | The public receipt log with inclusion proofs | IN USE |
| Trusted timestamps (RFC 3161) | Daily log roots stamped by three independent authorities | IN USE |
| Post quantum key exchange ML-KEM (NIST FIPS 203) | Connections to this site and the API use TLS 1.3 with the hybrid X25519MLKEM768 | IN USE |
| Post quantum signatures ML-DSA (NIST FIPS 204) | A second signature on every decision next to Ed25519, so a result stays valid only if both hold | IN PROGRESS |
| Hash based signatures SLH-DSA (NIST FIPS 205) | Long term signatures on the daily log roots | PLANNED |
Why post quantum now. Signatures we make today must still be checkable in decades. NIST plans to retire today's common public key algorithms over the coming years, so we are moving to its new post quantum standards before that, step by step and with public test vectors.
Open standards work. Our verification profile is an Internet-Draft at the IETF (draft-gravit-gevp). We follow NIST's work on post quantum cryptography and on AI agent identity and security, and we will take part in its public comment periods. We are not affiliated with or endorsed by NIST.
How it decides
Each rule is a published, versioned binding. The decision lists every rule it applied.
No aggregation laundering
Many weak records do not add up to a fact. Convergence is measured on independent sources only.
Independence
Records count only if signed by registered keys that have not been revoked. All keys of one operator count as one source.
Registry signed 3 of 5
The registry of verifiers is accepted only if at least 3 of 5 root keys signed it.
Freshness
Under a declared policy, timestamps that are stale, in the future or malformed demote the result.
The signed verdict counts
A record signed "check failed" blocks a Verified Fact; "no verdict" is not support. New in v0.6.0.
Reproducible record
Addressed by its content: identical inputs give the identical decision in Python and in Rust, on any machine.
Try it and check us
Fastest: open the sandbox. The verifier runs in your browser, with examples and a button that rechecks all 54 test vectors on your machine.
Reproduce every published number of the verification stack from a clean copy (Python ≥ 3.10):
git clone https://github.com/gravit-open-network-foundation/gravit-eval-pack
cd gravit-eval-pack
make eval # 47 of 47 test vectors, adversarial benchmark, Sybil experimentOr decide a single artifact with the verifier itself:
git clone https://github.com/gravit-open-network-foundation/verifier
cd verifier && pip install -e .
gravit-verify examples/artifact_signed.json --bindings-dir bindings \
--registry tests/golden/registry.json --trust-root tests/golden/trust_root.json --pretty --explainOur own claims about the verifier are listed for outside checking on agoranet.work, an independent public square for checking claims. Send a receipt there whatever the result.
Pilots
Proof of concept code written by the Gravit Open Network Foundation, to show how the verifier fits a real use. The companies named have not endorsed this code unless stated otherwise.
| Pilot | What it shows | Status | Code |
|---|---|---|---|
| SAFR v1.1 reference adapter | Runtime governance for agentic payments (MAS BuildFin.ai SAFR framework): independently corroborated action traces and a log that can be audited offline. Not an endorsement by MAS. | ON THE VERIFIER | gravit-safr-adapter |
| AI agent payments in stablecoins (AllUnity) | An agent's x402 payment in CHFAU, EURAU or SEKAU settles only on signed attestations from independent operators, bound to exactly this payment. | ON THE VERIFIER | gravit-allunity-poc |
| Regulated banking (Sygnum) | An agent's transfer proposal reaches a human for signature under the four eyes principle only after independent, fresh attestations; three operators from CHF 100 000. | ON THE VERIFIER | gravit-sygnum-poc |
| Prediction market collateral (DWF) | Loans against prediction market positions only at prices corroborated by oracles. Earlier "live on Solana" texts in this repository were a plan: correction. | UNDER REVIEW | gravit-dwf-poc |
| Market making (EasyMM) | Market evidence checked by the verifier before a quoting decision. | UNDER REVIEW | gravit-easymm-poc |
| BNPL credit (Yumi) | Concept for checking underwriting inputs. Written before the current verifier and not built on it. | EARLY CONCEPT | gravit-yumi-poc |
| Agents using several language models (Grok) | Concept for treating answers of several language models as evidence. Written before the current verifier and not built on it. | EARLY CONCEPT | gravitnet-grok-poc |
On the verifier: runs on the public verifier, reproducible. Under review: a version on the verifier awaits approval. Early concept: earlier code with claims we have not verified.
Get your free API key
Enter your email and confirm it with one click: your key arrives by email right after. Free plan, 1,000 calls per month; upgrade to Pro or Enterprise at any time.
Almost done. We have sent you an email: confirm your address with one click and your key follows.
That did not work. Please check the address and try again, or write to our contact form.
We store only your email address and the dates of sign up and confirmation. No tracking, no sharing with third parties. Unconfirmed addresses are deleted within 30 days.
Honest status
| Item | Today |
|---|---|
| Reference implementation, Python and Rust, 54 test vectors | YES v0.7.0, Apache-2.0 |
| Production root keys | NOT YET all published keys are test keys; the key ceremony is pending |
| Hosted API with signed receipts | AVAILABLE API; free key by email |
| Paid plans | AVAILABLE since 15 Oct 2026, paid in Bitcoin; in USDC, USDT and TON since 27 Oct 2026 |
| Production deployment at a customer | NO pilots only |
| Certifications (SOC 2 or others) | NO |