MIO° Conduct Record is a sealed, independently timestamped record of the mandates an AI agent operates under and the agent identities a tenant has registered. Each record is Ed25519-signed at the moment it is sealed and carries an outside timestamp from an independent authority, so its existence at that time does not depend on trusting the platform that issued it.
A mandate record carries the agent it applies to, the actions it permits, and — where one exists — the earlier mandate it supersedes. An agent-inventory entry carries an opaque reference to the agent's identity, never a name, email address or other raw personal data, and a fixed disclosure statement travels with every entry, quoted here exactly as it appears on the record: “This inventory identifies agent identities, not agents. An agent operating under a human credential is not visible to it.”
Two things are deliberately not claimed. First, whether a mandate was actually consulted before an agent acted under it — nothing in this system enforces that yet; a mandate answers "what was authorised," not "what was checked." Second, tamper-evident ordering — the sequence used to determine which mandate is currently in force depends on an ordinary, application-writable timestamp until a further, separate piece of key-custody work is complete, and any lookup result says so.
A tenant retrieves its own mandate or agent-inventory records through its existing, authenticated API access and can hand the resulting bundle — record, signature, and the public key it was signed with — to anyone, with no account and no live connection to this platform required on their part. The recipient verifies the bundle entirely offline, using nothing but the bundle itself and a short, auditable verification script:
node verify-record.js record-bundle.json --expect-did did:web:example.tenant.domainThe script checks the Ed25519 signature against the public key published inside the bundle, and,
where the --expect-did flag is used, checks that every signature claims to belong to
the tenant DID the caller expects — pinning the claimed name, not the keys, which a caller should
also confirm against that DID's own published document.
Download the verifier script.
MIO° Conduct Record is built by My Digital Sovereignty Ltd, the New Zealand company also responsible for the Village community platform and the AI Visibility Auditor. It shares its sealing and timestamping infrastructure with both.