Search papers, labs, and topics across Lattice.
This paper introduces a blockchain-anchored architecture designed to enhance the auditability of autonomous AI agent communications and human oversight processes. By creating cryptographic commitments for agent interactions without exposing sensitive content on-chain, the proposed system addresses the challenges of reconstructing workflows and ensuring compliance with regulatory frameworks like the EU AI Act. The architecture emphasizes the importance of capturing authenticity and causal traceability, thereby improving the evidentiary basis for future verification of critical processes.
Blockchain can now anchor AI agent communications, enhancing auditability and compliance without compromising sensitive data.
Autonomous AI agents increasingly communicate with other agents, invoke tools, exchange intermediate results, and request human approvals. These workflows create a new auditability problem: organizations must reconstruct what happened, when it happened, which agent or human was involved, which control or policy applied, and whether records were modified afterwards. Motivated by the 2026 OpenAI/Hugging Face incident, this position and architecture paper proposes a product- and vendor-neutral black-box architecture for agentic processes. The architecture creates blockchain-anchored cryptographic commitments for selected agent communications, human-in-the-loop approvals, tool calls, and process artifacts without placing sensitive content on-chain. We define an evidence model that distinguishes temporal anchoring and artifact integrity from event ordering, capture authenticity, authorized anchoring, and causal traceability. The latter properties require additional architectural controls. We then discuss practical use for Governance, Risk, and Compliance (GRC), including compliance testing, risk-based evidence selection, monitoring evidence streams, incident reconstruction, and regulatory reporting readiness under the EU AI Act, NIS2, and the Cyber Resilience Act (CRA). This position and architecture paper does not present an empirical performance or security evaluation. The approach does not prevent agent misbehavior or prove semantic truth. Rather, it strengthens the evidentiary basis for later verification of critical process traces.
