# CommitLayer

> CommitLayer verifies, after the fact, what an AI agent actually did: it reads the customer's own systems of record through read-only connectors, evaluates each recorded agent action under a written contract, and answers PASS, FAIL or UNKNOWN with the records behind it. The agent's own report is never evidence. It also reconciles what AI vendors bill as outcomes (resolutions, conversations) against the same independent facts.

CommitLayer is made by Asterfold Labs, Inc. It does not block or approve agent actions, does not place or move money or assets, and is paid only by its customers, never by the vendors or platforms it verifies.

## Start here

- [Documentation home](https://commitlayer.ai/docs): every guide and reference page, with the date each last changed
- [Quickstart](https://commitlayer.ai/docs/quickstart): from an API key to a verified action in five calls
- [After the first verdict](https://commitlayer.ai/docs/after-the-first-verdict): dry runs, webhooks, the completion gate, settlement, the SDK decorator
- [Beyond one action](https://commitlayer.ai/docs/beyond-one-action): per-agent totals over a window, values compared with the request, records that undo an action
- [How it works](https://commitlayer.ai/methodology): how a verdict is produced, step by step
- [Definitions](https://commitlayer.ai/definitions): every contract in plain language, cited to its source and dated
- [Benchmark](https://commitlayer.ai/benchmark): three real agents scored against a database oracle
- [Failure Lab](https://commitlayer.ai/lab): 48 recorded agent runs with injected failures, verified live
- [Integrations](https://commitlayer.ai/integrations): the systems of record it reads, all read-only
- [Pricing](https://commitlayer.ai/pricing): priced by verified actions; Developer is free
- [Changelog](https://commitlayer.ai/changelog) ([markdown](https://commitlayer.ai/changelog.md))
- [Trust Center](https://commitlayer.ai/security): scopes, retention, encryption, independence policy

## Reference

- [API reference](https://commitlayer.ai/docs/api) ([markdown](https://commitlayer.ai/docs/api.md)): Every endpoint of the HTTP API: request and response shapes, error codes, limits, idempotency, dry runs, and what each plan allows.
- [Action contracts](https://commitlayer.ai/docs/action-contracts) ([markdown](https://commitlayer.ai/docs/action-contracts.md)): The YAML that states what must hold before an agent acts, the limits on the action, and the effects that must and must not appear in the systems of record afterwards.
- [MCP server and connectors directory](https://commitlayer.ai/docs/mcp) ([markdown](https://commitlayer.ai/docs/mcp.md)): The MCP server assistants read verdicts and evidence from, the OAuth flow, the tool list with its annotations, and the Claude connectors directory listing.
- [OpenTelemetry convention](https://commitlayer.ai/docs/otel-convention) ([markdown](https://commitlayer.ai/docs/otel-convention.md)): The span attributes that turn an agent runtime's OpenTelemetry traces into recorded actions and facts, with the OTLP endpoint to send them to.
- [The sandbox and the failure matrix](https://commitlayer.ai/docs/sandbox) ([markdown](https://commitlayer.ai/docs/sandbox.md)): How CommitLayer is tested without customers: a small enterprise of fake systems, a scripted or model-driven agent, injected failures, and an oracle that scores every verdict.

## Connectors

- [Stripe](https://commitlayer.ai/docs/connectors/stripe) ([markdown](https://commitlayer.ai/docs/connectors/stripe.md)): What the Stripe connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.
- [Shopify](https://commitlayer.ai/docs/connectors/shopify) ([markdown](https://commitlayer.ai/docs/connectors/shopify.md)): What the Shopify connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.
- [Salesforce](https://commitlayer.ai/docs/connectors/salesforce) ([markdown](https://commitlayer.ai/docs/connectors/salesforce.md)): What the Salesforce connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.
- [HubSpot](https://commitlayer.ai/docs/connectors/hubspot) ([markdown](https://commitlayer.ai/docs/connectors/hubspot.md)): What the HubSpot connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.
- [Zendesk](https://commitlayer.ai/docs/connectors/zendesk) ([markdown](https://commitlayer.ai/docs/connectors/zendesk.md)): What the Zendesk connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.
- [Intercom](https://commitlayer.ai/docs/connectors/intercom) ([markdown](https://commitlayer.ai/docs/connectors/intercom.md)): What the Intercom connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.
- [Coinbase](https://commitlayer.ai/docs/connectors/coinbase) ([markdown](https://commitlayer.ai/docs/connectors/coinbase.md)): What the Coinbase connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.
- [CSV, XLSX and Parquet upload](https://commitlayer.ai/docs/connectors/generic-csv) ([markdown](https://commitlayer.ai/docs/connectors/generic-csv.md)): What the CSV, XLSX and Parquet upload connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.
- [OpenTelemetry ingestion](https://commitlayer.ai/docs/connectors/otel) ([markdown](https://commitlayer.ai/docs/connectors/otel.md)): What the OpenTelemetry ingestion connector reads, with which permissions, what it never touches, how it syncs, and the facts it produces.

## SDKs

- [Python SDK](https://commitlayer.ai/docs/sdk/python) ([markdown](https://commitlayer.ai/docs/sdk/python.md)): Record agent actions, push facts from systems of record, read verdicts and draft contracts. Standard library only; Python 3.10+.
- [TypeScript SDK](https://commitlayer.ai/docs/sdk/js) ([markdown](https://commitlayer.ai/docs/sdk/js.md)): Record agent actions, push facts from systems of record, read verdicts and draft contracts. Zero runtime dependencies; Node 18+ (uses the global fetch). Ships with TypeScript types.
- [Go SDK](https://commitlayer.ai/docs/sdk/go) ([markdown](https://commitlayer.ai/docs/sdk/go.md)): Record agent actions, push facts from systems of record, read verdicts and draft contracts. Standard library only; Go 1.22+.
- [Java SDK](https://commitlayer.ai/docs/sdk/java) ([markdown](https://commitlayer.ai/docs/sdk/java.md)): Record agent actions, push facts from systems of record, read verdicts and draft contracts. The runtime has zero dependencies (JDK HTTP client, its own JSON codec); Java 17+.

## MCP recorder

- [MCP recorder (Python)](https://commitlayer.ai/docs/recorder/python) ([markdown](https://commitlayer.ai/docs/recorder/python.md)): A small stdio proxy that sits between an MCP client (Claude Desktop, Claude Code, Cursor, an agent framework) and any downstream MCP server (a Stripe or Zendesk MCP server, your own). It forwards every JSON-RPC…
- [MCP recorder (TypeScript)](https://commitlayer.ai/docs/recorder/js) ([markdown](https://commitlayer.ai/docs/recorder/js.md)): A small stdio proxy that sits between an MCP client (Claude Desktop, Claude Code, Cursor, an agent framework) and any downstream MCP server (a Stripe server, a Zendesk server, your own). It forwards every JSON-RPC…

## Workflow runtimes

- [Temporal and Inngest (Python)](https://commitlayer.ai/docs/integrations/python) ([markdown](https://commitlayer.ai/docs/integrations/python.md)): CommitLayer for durable-workflow runtimes. One distribution, two optional packages, built on the commitlayer SDK:
- [Temporal and Inngest (TypeScript)](https://commitlayer.ai/docs/integrations/js) ([markdown](https://commitlayer.ai/docs/integrations/js.md)): CommitLayer for workflow engines. Two subpaths, one package, zero runtime dependencies beyond the engine you already run (@temporalio/ and inngest are optional peer dependencies; the matching SDK is loaded lazily, so…
- [Temporal (Python)](https://commitlayer.ai/docs/integrations/python/temporal) ([markdown](https://commitlayer.ai/docs/integrations/python/temporal.md)): CommitLayer for the Temporal Python SDK. Temporal makes the workflow durable. CommitLayer independently verifies the result.
- [Inngest (Python)](https://commitlayer.ai/docs/integrations/python/inngest) ([markdown](https://commitlayer.ai/docs/integrations/python/inngest.md)): CommitLayer for the Inngest Python SDK. The same positioning as the Temporal package, in Inngest's terms: Temporal makes the workflow durable. CommitLayer independently verifies the result. Here Inngest makes the…

## Optional

- [MCP connector in the Claude directory](https://claude.ai/directory/commitlayer): read verdicts and evidence from Claude
- [Agent trading on Coinbase](https://commitlayer.ai/use-cases/agent-trading): verifying what an agent traded through Coinbase for Agents
- [Public verification](https://commitlayer.ai/verify): check any verdict or statement hash without an account