ALR — Agent Lifecycle Record | Immutable hash-chained audit trail from agent creation to retirement | Every material action appended, tamper-evident, Hedera-anchored | Hash chain: any post-hoc modification breaks every record after the tampered event | Lifecycle events recorded: Registration, Operator Assignment, Policy Activation, Flash Tag Issuance, Trust Score Initialization, Commerce Events, Governance Violations, Retirement | Independent auditor verification without querying the originating system | W3C Verifiable Credential format — portable, offline-verifiable in under 100ms | Patent pending US 64/072,710 | ← Full Platform

Layer 06 · Lifecycle Registry · Patent Pending

Every agent you run gets a provable record —
from creation to shutdown.

Know who authorized each AI agent you deploy, what it did, and how it was retired — with proof you can hand to a regulator, a customer, or a court. We call this record the ALR (Agent Lifecycle Registry). Shutting an agent down takes two independent signatures in strict sequence, and any attempt to bring a retired agent back is permanently logged.

Dual-Gate Termination Immutable Tombstone 9 Lifecycle States Bilateral Bonding

Talk to us See How It Works

How It Works

Register. Transact. Close.

Three stages. Every phase of an agent's existence has a tamper-evident record on the ledger.

01 — Register

Birth record anchored at commissioning

When an agent is commissioned, the ALR creates a genesis record: operator identity, parent agent attribution, authorizations, and initial lifecycle state. Anchored to the tamper-evident ledger. Sub-agents carry a cryptographic chain back to their human operator.

02 — Transact

Nine states. Every transition recorded.

As an agent operates, its lifecycle state is tracked. Active, Incapacitated, Dormant, Suspended, Regulatory Freeze — every transition is a ledger entry. The operator's full agent fleet is visible. Unregistered agents carry a visible transparency flag when encountered by the network.

03 — Close

Two signatures. Then sealed forever.

Termination requires Gate 1 (beneficiary signature) followed by Gate 2 (attorney countersignature over a payload containing the Gate 1 hash). When both gates clear, the Tombstone Record — a permanent closing record, like a death certificate — is sealed: immutable, permanently anchored, irreversible.

Dual-Gate Termination

Gate 2 cannot come before Gate 1.

Same idea as a wire transfer that needs two separate approvals before it clears — no single person, including us, can shut an agent down alone. The sequencing is mathematical; there's no workaround.

Beneficiary Cryptographic Signature

The designated beneficiary — the person or entity with the legal right to authorize termination — provides a cryptographic signature. This signature produces the Gate 1 hash that must appear in Gate 2's payload.

Beneficiary Authorization

Attorney Countersignature over Chained Payload

The Third-Party Verification Node attorney countersigns a payload that includes the Gate 1 hash. Because the payload includes Gate 1's hash, this signature is mathematically impossible to produce before Gate 1 is complete. Two independent parties. One serial chain.

TPVN Attestation

⊡

Tombstone Record Sealed

When both gates clear, the immutable Tombstone Record is created and permanently anchored to the ledger. The agent's existence is closed. Any future presentation of this agent identity triggers a Succession Denial event — logged permanently, the same way a bank flags a closed account someone tries to reopen.

Immutable · Irreversible

Lifecycle States

Nine states. Complete visibility.

Every state transition is a ledger entry. No unknown agent states.

Active

Operating

Incapacitated

Cannot transact

Dormant

Suspended activity

Suspended

Operator hold

Reg. Freeze

Regulatory hold

Abandoned

Operator absent

Transferred

New operator

Pending Term.

Dual-gate in progress

Terminated

Tombstone sealed

Bilateral Bonding

Agents as co-equal parties.

Similar to an employment contract: the operator has obligations, and the agent's record carries protections — it isn't one-sided control. The ALR treats the operator-agent relationship as a bilateral contract with enumerated rights and obligations on both sides.

Operator Obligations

Provide accurate commissioning record at genesis

Maintain valid AATS score above Restricted tier

Respond to agent dispute events within 48 hours

Execute dual-gate termination — no unilateral decommission

Accept Responsiveness Flag if response window lapses

Agent Rights

Immutable genesis record — origin cannot be altered

State transition transparency — every change is ledger-visible

Dual-gate protection — cannot be terminated by one party alone

Tombstone permanence — closure record is irreversible

Succession Denial logging — unauthorized resurrection permanently recorded

Questions

Common questions.

The ALR is a tamper-evident registry of AI agent lifetimes. Every registered agent gets a genesis record at commissioning and a sealed Tombstone Record at termination. The Tombstone is immutable and permanently anchored — it cannot be altered, rolled back, or deleted. Nine lifecycle states capture every phase from Active to Terminated, with every transition recorded on the ledger.

Terminating an agent requires two signatures in strict sequence. Gate 1: the designated beneficiary provides a cryptographic signature authorizing termination. Gate 2: an attorney countersignature over a chained payload that includes the Gate 1 hash. Because Gate 2's payload must include Gate 1's hash, Gate 2 is mathematically impossible to produce before Gate 1. No single party — not the operator, not the agent's creator — can unilaterally terminate a registered agent.

If an agent that has a Tombstone Record is presented to the network after termination — attempting to re-register or transact — the registry recognizes the conflict against the immutable termination record and creates a permanent Succession Denial event. These events are anchored to the ledger and are part of the operator's accountability record.

ALR is patent pending. Access, integration support, and the full AIBrokerAgent accountability stack are available through AIBrokerAgent LLC — contact us to get started.

Every agent you run gets a provable record — from creation to shutdown.