Decision Passport: An Audit Layer for AI Agent Execution Governance
What Decision Passport Addresses
The recent Claude Code source leak discussion on r/LocalLLaMA highlights a critical architectural gap in AI agent systems. As agents gain capabilities like tool access, browser access, memory handling, background execution, and multi-step workflows, the governance question shifts from "can the agent do useful work?" to accountability questions.
The Governance Gap
The source identifies key questions that current logging and observability tools don't fully address:
- Who authorized this action?
- Under what policy?
- What execution context existed at the time?
- What changed?
- What was blocked?
- Whether that record can still be trusted later outside the original runtime
The author notes: "Logs help you inspect. Proof helps you defend."
Decision Passport Features
The tool provides:
- Append-only execution records
- Portable proof bundles
- Offline verification
- Tamper-evident chains
- Verifier-first design
The author clarifies this doesn't "solve" sandbox escape or agent safety by itself, but makes the governance gap more visible and provides stronger answers to what happened, in what order, under what permission, with what evidence, and whether anyone can verify it later without trusting the original platform.
Available Repositories
The project is open source with two main components:
- Core:
https://github.com/brigalss-a/decision-passport-core - OpenClaw Lite:
https://github.com/brigalss-a/decision-passport-openclaw-lite
Discussion Points
The source raises questions for the community to consider:
- Is this just better observability?
- A missing audit/proof layer?
- Overengineering for most agent workflows?
📖 Read the full source: r/LocalLLaMA
👀 See Also
Offline-web-search: A Local Google Search Alternative for AI Agents
A developer built offline-web-search to address poor offline search capabilities in AI agents, creating a drop-in replacement that mimics Claude's web tools with BM25 ranking, SQLite FTS5 indexing, and support for ZIM archives and custom crawlers.
Cognithor v0.40.0 adds persistent AI agent identity with ethical constraints
Cognithor v0.40.0 introduces the Immortal Mind Protocol, giving local AI agents persistent identity across sessions with 7 hardwired ethical anchors and dream cycles for memory consolidation. The update adds 9,488 lines of code and runs 100% locally.
Vektori's Memory Architecture: Principles from Claude's Leaked System
Vektori implements a three-layer hierarchical sentence graph for AI memory, inspired by leaked principles from Claude's architecture. The system uses strict quality filters, skeptical retrieval with a 0.3 minimum score, and maintains correction history across sessions.
Needle: A 26M Parameter Function-Calling Model That Runs at 6000 tok/s on Mobile
Cactus open-sources Needle, a 26M parameter model for single-shot function calling, achieving 6000 tok/s prefill and 1200 tok/s decode on consumer devices. Built with Simple Attention Networks (no FFNs), it beats several larger models on tool-use benchmarks.