# The API — Verity

One call at the seam, priced by consequence. Your agent's runtime submits each
proposed action to the gate before executing it, and acts only on the verdict
returned. Access comes in stages — pilot, shadow, enforcement — and the economics
are stated before the first call is ever metered.

## How access works

1. **Pilot.** A scoped engagement against your own agents, in your own environment.
   The pilot letter states the shadow window, the enforcement terms, and the
   volume bands, in advance.
2. **Shadow mode.** The gate watches and decides, and enforces nothing. Every
   proposed action is checked, every verdict is returned and sealed into the
   audit chain, and the action proceeds regardless. Shadow mode is free for the
   pilot window.
3. **Enforcement.** Enabled per action class, beginning with the irreversible
   ones. The first enforced verdict is the first metered one. Nothing before it
   is billed; everything before it is recorded.

## Pricing principles

- **Shadow mode is free for the pilot window.** While the gate only watches,
  you pay nothing.
- **Enforcement is metered per verdict.** Metering starts with the first verdict
  your runtime actually obeys.
- **Priced by consequence, not by the call.** A read-only check costs next to
  nothing. A verdict that guards a payment, a refund, a shipment, or a grant of
  access is priced against what it guards.
- **The sealed record is priced as retention and proof.** The audit chain —
  every verdict, hash-linked, replayable — is kept, retrievable, and exportable
  as certified proof for examiners, insurers, and disputes.
- **Conversion is contractual, never a paywall.** The pilot letter names the
  shadow window, the enforcement rate, and the volume bands before the first
  call. No price appears after dependence.

The standing rule for every figure: the gate must always look cheap next to the
loss column.

## Sovereignty

Every verdict is recorded from day one — the chain does not start when billing
does. The proposals your agents submit, the verdicts returned, and the chain that
links them are your records of your systems. Export is guaranteed, in full, in a
verifiable form, at any time, including if you leave. The live chain is operated
by Verity; the history it holds is yours. Leaving ends enforcement and metering.
It does not delete, degrade, or ransom the record.

## The seam is live

Shadow mode is running on this domain now. The gate described on this page is a
live service, taking proposals and sealing verdicts today:

- **POST /api/v1/verdict** — submit a proposed action (actor, action, consequence
  class). Returns ALLOW, VETO, or ESCALATE, with the rule that decided it.
- **GET /api/v1/chain/verify** — replay the audit chain from the first record
  and confirm every link.
- **GET /api/v1/health** — service status, and whether the chain database is
  bound.

Every verdict is written as a hash-chained record into Verity's own database —
the chain accumulates where it's owned. Pilots receive a caller key by writing
pilot@verityverdict.com; there is no self-serve signup, and keys are issued per
engagement.

## Request access

API access begins with a pilot: pilot@verityverdict.com

- Page: https://verityverdict.com/api/
- Markdown: https://verityverdict.com/api.md

Verity is an independent cybersecurity and defense practice working on verification
architecture for autonomous AI systems. Never contain the model. Gate the output.
