deterministic replay

Every run is a signed timeline.

Scrub through any production run. See the planner, the workers, every grant, every tool call, every artifact. Replay handles are signed inline — auditors verify without a database round-trip.

session

session://soc2-mesh/q1-2026/a47c91

agentsoc2-autonomous-agent-mesh@v2.0.0

callercompliance-lead@acme

skillcollect_quarterly_evidence

tasktask-soc2-q1-2026

started2026-05-28T13:41:02Z

elapsed3m 13s

seedseed-9f3a2c8e

receiptreceipt://soc2-mesh/q1-2026/abc123

status: okeval: 0.94reviewer: @aisha

execution graph

5 agents · 4 handoffs · 4 grants

planner-agent→

evidence-collector→

policy-reviewer→

vulnerability-scanner→

compliance-approver

planner dispatches to 3 specialists in parallel · convergence at compliance-approver

timeline · 14 events

scrub · expand

00:00.000
skill_startidx 0
planner-agent · collect_quarterly_evidence
input_hash sha256:7c3a… · random_seed seed-9f3a2c8e
```
{"period": "2026-Q1", "scope": ["CC1-CC9"]}
```
00:02.114
handoff_startidx 1
planner → evidence-collector
grant://grant-1 · 15m TTL · audience-bound
00:03.207
handoff_startidx 2
planner → policy-reviewer (parallel)
grant://grant-2 · 15m TTL
00:04.488
handoff_startidx 3
planner → vulnerability-scanner (parallel)
grant://grant-3 · 15m TTL
00:14.041
workspace_readidx 4
evidence-collector · 1,953 reads
policies/ + access-reviews/ + vendors/ + tickets/
00:41.722
tool_callidx 5
policy-reviewer · score_controls
47 controls scored · 44 covered · 3 partial
```
{"matrix": "CC1-CC9", "framework": "SOC2-Type-II"}
```
00:58.011
tool_callidx 6
policy-reviewer · CC6.7 evaluation
vendor offboarding log missing · partial coverage flagged
01:02.331
tool_responseidx 7
vulnerability-scanner · open findings
12 high-sev open · 4 inside SLA · 8 overdue (CC7.1 exception)
01:18.099
scope_requestidx 8
evidence-collector · request_scope
workspace/vendors/offboarding/* (reason CC6.7)
```
{"reason": "CC6.7", "pattern": "vendors/offboarding/*"}
```
01:52.402
scope_approveidx 9
approver @aisha · grant rotated
grant://grant-4 · 60m TTL · scoped delegation
02:33.610
handoff_startidx 10
3 specialists → compliance-approver
convergence point · 3 specialist reports merged into control matrix
02:48.122
tool_responseidx 11
compliance-approver · 3 exceptions
CC6.7 partial · CC7.1 8 overdue findings
03:11.804
artifact_writeidx 12
evidence-pack sealed
evidence-pack/q1-2026.zip · 217MB · 489 files
03:13.001
skill_endidx 13
receipt sealed · eval 0.94 · replay attached
ready for CISO review

how it works

The runtime records. The wire format proves.

Every event in a session is appended in order by the runtime — skill starts, LLM calls, tool calls, workspace reads, scope requests, handoffs, artifact writes. The session is sealed with Ed25519 at skill_end. Auditors verify the timeline with the public key, no database needed.

schema: ReplaySession · signing: a2a_pack.replay · verifying key: A2A_REPLAY_VERIFYING_KEY

# verify a session

from a2a_pack import verify_replay_session, iter_events

session = verify_replay_session(token)
for event in iter_events(session):
    print(event.idx, event.kind, event.ts_ms)