v0.1.0 — M1: an agent decision, anchored on devnet, verified from outside

What's new
Record an agent decision and verify it from outside — the full path works end to end: the SDK signs a decision locally, the API accepts only what already verifies, the publisher anchors it on Solana devnet, and a third party confirms it without asking AgentTrace anything.

Details
agenttrace-verify tells every state apart with its own exit code (0 verified · 2 tampered · 3 pending · 4 unavailable · 5 content-deleted; 1 means the check did not run), and prints every mismatch, not the first
the public decision page reads the anchor from the chain in the reader's browser, so verified never comes from our word — no anchor, no verified
the agent's private key never leaves the agent; secrets are redacted by allow-list before hashing, measured at 0 leaks over 200 decisions
measured on devnet, 10 decisions per run: decision → verifiable 5.4–6.4 s p95 (budget 10 s), SDK overhead 11.9–12.7 ms p95 (budget 50 ms), nothing lost while ingest was refusing connections
Files changed
packages/manifest — format, hashing, Merkle root, Ed25519, both anchor codecs
packages/sdk — recorder, redaction, local keystore, disk buffer, client
apps/api — ingest auth, agents, decisions, quotas, public read
apps/publisher — memo transaction and the batched anchoring pass
packages/verify — pure verification, chain/storage sources, the CLI
apps/web — public decision page and the verification state
packages/e2e — mock decision generator and the measured end-to-end run
Migration
⚠️ First deploy applies all three migrations: 0000_init, 0001_usage_daily, 0002_anchor_in_flight. Nothing is deployed yet — hosting lands in v0.2.0.

Not in this release, and worth saying out loud
demo data is mock — a test agent generates decisions from fixtures; the signature, the anchor and the verification are real, the decisions are not
no dashboard, no accounts, no retention — the database only grows
devnet, which gets reset — no anchor here is meant to outlive the demo
the envelope still comes from our own public read (owner storage lands in v0.4.0), so the independent half of a demo verification is the chain
SC-002 (integrate in 5 minutes, 10 lines) is self-assessed: it is measured on our own test agent, and only a third-party project can settle it
Try it
A standalone verifier page landed on main right after this tag and is live at https://agenttracewoof.github.io/Agent-Trace/ — it reads the chain from your browser and never calls AgentTrace.