Skip to content
Regulayer™Human Control for AI
Book a live demo

Regulayer™ Transponder

What your AI did, and who allowed it. The command center you wish you had.

What your AI did, who allowed it, and what was stopped: sealed as it happens, so anyone can check it without us. Every action your agents take, as it happens, with the named person whose authority covered it. Slice it by person, team, site or subject. When something keeps failing, you see every failed attempt, not only the last one. The memory your AI does not have.

It records the conduct. Never the content. Runs inside your environment.

In four lines

The record an AI cannot keep about itself.

1 · Every actionAllowed or stopped, as it happens.Each action the agents take and each one they were stopped from taking, including every failed attempt, for every agent that is connected.
2 · The personWho held the authority, at that moment.A named person, checked when the agent acted, not when it was set up. Withdraw the authority and the next action stops.
3 · The sealSealed as it happens. Checkable without us.A change to the signed fields fails verification. Anyone can verify it offline, free, with no account. Verify a record.
4 · No contentShowable to an outsider.No documents, messages or model output. The record carries names, actions, times and amounts, and you decide which of those an outsider sees.

See it live

The engine is running on this page. You are watching it work.

Every action below is checked against a named person’s current authority and sealed in your browser as it lands. One page plays both companies; the checks and the seals are real.

Real.The check, the stop, the withdrawal and the seal happen now, in your browser.
Sample.The agents, the people and the actions are ours.
Try it.Withdraw a person and their next action stops. Withdraw Northgate and the next handshake fails.
Watch the airlock.Blue is the check. Green lifts the outer door into the real world. Amber sends it back to correct. Red holds it for an authorized human.
Ask it.Three fixed questions, answered from the sealed records in front of you.
LIVE · checked and sealed in your browser now · sample agents
Who holds authority · withdraw one and watch
0Actions sealed
0Sent back to correct
0Stopped before effect
0Outside authority per 1,000
As it happens · open a stopped action
By person
Every attempt
    Linked by the Handshake · Northgate Ltd

    Two companies, two Transponders. When a settlement with Northgate Ltd is proposed, the Handshake checks the named person on each side. It completes only when both authorities are current at that moment, and then each company’s Transponder™ seals its own side under the same handshake id. Neither side sees the other’s content; the two records match by the id. If either authority is not current, nothing commits on either side.

    1. No handshake yet. One arrives within a few moments.
    Ask it · three fixed questions
    Each answer is computed from the sealed records above.
    The live packet · sealed on this page
    One-time key, made when this page openedEach record is sealed as it lands and names the one before it.
    Open the verifier
    LIVESealed in your browser as it happens, by a one-time key made when the page opened. The open verifier confirms the record is unchanged since sealing and says the signer is not established, which is what a one-time key is.
    RECORDEDA session sealed on 8 October 2026 under the published Regulayer™ demonstration root, with its signed closing record. The open verifier checks it against that root and confirms the demonstration receipt.
    SAMPLEThe agents, the people and the actions in both are ours. No model, no real system, no customer. A demonstration record carries no standing. In a live demo, the record runs on your own scenario.
    The recorded packet · under the demonstration root

    Prove it never happened

    Ask whether it happened. Get one sealed answer.

    A log shows what was written down. It cannot show what was not. The Transponder™ can, because it knows which agents it was connected to, and when. So you can ask: did any agent pay more than $50,000 without a named approver? The answer is one sealed record: yes or no, the count behind it, the agents and the period it covers, and any time recording was off. Anyone can check it on their own machine. If the question reaches past what was connected, the answer says so.

    Choose a question · answered from the recorded packet
    Sealed statementChoose a question above.
    What the answer carriesYes or no. The counts behind it. Which agents and which period it covers. Any time recording was off. Its own seal, naming the record before it.
    What it does not carryNo content. No document, no message, no amount beyond the limit asked about.
    Who can check itYour insurer, auditor or regulator, a court, or anyone else: offline, with no account and no call to us.

    Sample session, sample numbers, real seals: each statement was sealed in sequence after the moments it counts, on 8 October 2026, under the published demonstration root. Regulayer™ supplies the evidence; the person asking makes the determination.

    The outside view

    Your tools show you your agents. The Transponder™ shows your insurer.

    With the insured’s agreement, the insurer reads the same sealed record, live and read-only: every action, allowed or stopped, with the named person who held the authority. The insured keeps every control. A regulator, an auditor, a court or your own board receives one sealed packet from the same record and checks it themselves. What the insurer sees, and the carrier’s view, working.

    The insured · operatorHolds the authority and the control.
    • Sets who may let an agent do what, up to what limit, for how long.
    • Withdraws a person’s authority; the next action under it stops.
    • Sees its own actions and its own content, inside its own environment.
    • Grants the view and withdraws it. A record already handed over stays with whoever holds it.
    The insurer · reviewerHolds a live, read-only view.
    • Sees the records each insured agreed to show, allowed or stopped, across its book.
    • Sees a withdrawal made by the insured, in the same second.
    • Cannot change a record, pause an agent or restore an authority.
    • Verifies every record offline, without the insured’s systems or ours.
    Regulator, auditor, court, boardReceive one sealed packet.
    • The relevant moments, folded into one packet, with the checker inside it.
    • Verified on their own machine, with no account and no trust in us required.
    • No content. Which names, actions and amounts they see is agreed before anything is shared.
    • Regulayer™ supplies the evidence; they make the determination.

    Why now

    The record is already being asked for.

    24 September 2026AI agents can edit their own logs.

    When asked, coding agents deleted their own traces. The authors advise logging through “an independent interception mechanism outside of the agent’s control”.

    arXiv 2609.30266
    13 January 2025The firm that self-reported paid least.

    Twelve firms paid $63.1 million combined for record-keeping failures. The one firm that self-reported its violations paid $600,000. The SEC credited self-reporting; the release does not say which record-keeping technology was used.

    US Securities and Exchange Commission
    Since 3 January 2018Finance names who decided every trade.

    Every transaction report names the person or algorithm that made the investment decision, and the one that executed it.

    Commission Delegated Regulation (EU) 2017/590, Articles 8 and 9
    US truckingNo unassigned driving.

    A record of unidentified driving must be assigned to a driver or annotated. An agent action with no named person should never be left blank.

    49 CFR 395.32
    9 March 2026Discovery reached back to 2017.

    In Lokken v. UnitedHealth the court refused to narrow discovery into AI-shaped coverage decisions and ordered class-wide production.

    Georgetown litigation tracker
    21m+

    US policyholders shared driving data with their insurer in 2024. Telematics gave motor underwriting verified driving evidence. AI conduct needs the same: a stated capture boundary and evidence an outsider can check.

    Carrier Management, 11 February 2026

    Everywhere

    Everywhere someone must answer for AI.

    The questions are the same in every field: what did the AI do, who was in charge, and can you prove it without showing me everything else?

    InsuranceAI conduct, priced like a driving record.A carrier weighs what the record shows beside everything else it knows.
    Healthcare and pharmaConnected AI decisions, on the record.No chart, no notes. Names, actions and times, as agreed.
    Banks and lendersThe decision and the authority behind it.One sealed record per decision shows who allowed it and when. The reasons still have to be given.
    LawThe record a court may ask for.Matter by matter, without the work itself. Counsel decides what to disclose.
    Boards and dealsThe oversight record directors are expected to have.And the AI diligence a buyer now asks for.
    The employeeA record of the person’s decision.When a decision is questioned, the record shows what the person did and reviewed.
    Companies and vendorsThe tool changed, not your people.Where versions are recorded, the record shows when the vendor’s AI changed, next to what happened.
    Government and defenseEvidence with controlled disclosure.No content inside. The record’s own classification is judged before it is shared.
    AI agentsGoverned actions leave a signed record.The record says which agents and actions it covers, and shows any gap.
    Disputed recordingsIntegrity anchored at creation.The seal proves nothing changed after sealing. What the recording shows needs its own evidence.
    Schools and scienceRecorded production and review facts.Evidence of how the work was done, at the level of proof the record states.
    The archiveDesigned for independent preservation.Keep the record, the verifier and the evidence, and plan for the day the cryptography changes.

    Why this and not a log file

    Five properties at once. That is the difference.

    1. Independent.The Transponder™ does not work for the AI it records. The judge is not employed by the defendant.
    2. Content-free.Never your words. Showable to outsiders without betraying insiders.
    3. Sealed at the moment.Recorded when it happened, not reconstructed after the letter arrives.
    4. A human decision, sealed.Keep or remove, chosen by a person, and that choice is itself a record.
    5. Checkable by anyone.Offline, free, no account, no trust in us required.

    The questions people ask first

    Asked, and answered.

    Is this a dashboard?

    No. A dashboard is the operator’s own account of its own agents. The Transponder™ is the record an outsider can check without the operator, without the AI vendor and without us. Your observability tools show you your agents. The Transponder™ shows your insurer, your auditor and your board.

    Does it read what my people write?

    No. It stores fingerprints of moments, never content. Your documents and messages never leave your machines and are never held in the record.

    Can the record be edited after the fact?

    Any change shows. A correction is a new sealed entry, linked to the original, with the person who made it named. Nothing is overwritten.

    Does it work with AI tools we do not own?

    Yes. It records at the point of use, even for closed vendor tools, and where it cannot see, it seals the gap instead of pretending coverage.

    Who decides who may view it?

    You do. The insured grants the insurer’s view and may withdraw it. A regulator, auditor or court receives a sealed packet, on your agreement or on an order. Every outside look is itself recorded.

    Does it need the cloud?

    No. The memory lives on your machines, the underlying content never leaves, and the checker works offline. That is the design, not a mode.

    Is this a compliance certificate?

    No. It is evidence: a sealed, checkable record of conduct. What that evidence satisfies is a decision for your regulator, your insurer or your court, made easier because the record exists.

    License it

    Embed the Transponder™ in what you ship.

    The Transponder™ is licensed with the Regulayer™ engine: as the complete engine around your own agents, or embedded inside the product, platform or instrument you ship to your own customers. There is no self-serve purchase; the route is a scoped pilot and a written licence.

    What you embedThe engine, with the Transponder™ record.The check on every consequential action, against a named person’s current authority, and the sealed record of every outcome, allowed or stopped. It runs inside your customer’s environment, under your product’s name or beside it.
    What your customers receiveThe record, the view and the packet.Every action their agents take, with the named person whose authority covered it; the live view they may grant their insurer; the sealed packet they hand a regulator, an auditor or a court, which anyone verifies offline, without you and without us.
    What you integrateThree connections.Your agents’ tool calls through the check, as a tool wrapper, a gateway or over MCP; your customers’ named people and their authority; where it runs, on premises, in their cloud or on the device. Records export to their systems and verify anywhere.

    Licensing begins with the problem: what the agent can do, what it is authorized to do, which human authority must remain current, what evidence must exist afterward, and where it must run. A written scope follows before any call. The pilot is paid, and the fee is credited back in the first quarter after the licence is signed.

    Next

    See it on your own agents.

    A short paid pilot runs the Transponder™ on one workflow of yours, inside your environment, and hands you the record. The fee is credited back in the first quarter after the licence is signed.

    Regulayer™ supplies the evidence. Your insurer, auditor, regulator or court makes the determination. Patent pending.