Favors.devVaara
The open-source accountable autonomy layer providing tamper-evident evidence for AI agents
- 1
- favorite
About Vaara
Vaara is an open-source framework designed to provide verifiable, tamper-evident receipts for every action taken by AI agents and autonomous systems. It is built for organizations that need to prove why an agent acted, ensuring compliance with regulations like the EU Product Liability Directive by providing an independently verifiable audit trail that does not rely on internal logs.
Key features
- Policy Gating: Intercepts tool calls to allow, block, or escalate actions to a human before they occur.
- Tamper-Evident Auditing: Uses hash-chained records (SHA-256) with optional Ed25519 or post-quantum signatures, anchored to RFC 3161 / eIDAS qualified timestamps.
- Hardware-Rooted Security: Ties execution records to machine TPM 2.0 quotes and IMA measurements.
- Independent Verification: Allows third parties to verify records without access to the original system or signing keys using the
vaara verify-recordcommand. - Infrastructure Agnostic: Runs entirely within your own infrastructure with no SaaS, no telemetry, and no signup required.
Integrations
- Agent Frameworks: Native hooks for LangChain, CrewAI, and the OpenAI Agents SDK.
- Protocol Support: Supports MCP (Model Context Protocol) execution records and
did:webcatalog entries. - Development Tools: Includes a TypeScript client on npm and a Claude Code plugin.
Pricing & plans
- Paid Evaluation: EUR 4,500 for a 60-day shadow mode deployment to analyze traffic and generate an evidence bundle.
- Disclosure Pack: From EUR 4,500 per system to prepare evidence sets for regulatory compliance.
- Full Deployment: From EUR 12,000 for a four-week engagement including shadow mode, policy tuning, and enforcement.
- Commercial License: Available on request for closed-source products or hosted services.
Frequently asked questions about Vaara
Does Vaara require a SaaS subscription or cloud telemetry?+
No. Vaara is open-source, requires no signup, and does not use SaaS or telemetry. It runs entirely within your own infrastructure.
Can third parties verify my agent's actions without my help?+
Yes. Because Vaara creates tamper-evident, hash-chained records, anyone can verify the evidence offline using the public key and the standalone checker without needing access to your internal systems.
What happens if I use Vaara in a closed-source product?+
Vaara is licensed under AGPL-3.0. If you are building a closed-source product or running a modified version as a hosted service, you must obtain a commercial license directly from the copyright holder.
How does Vaara help with EU AI Act compliance?+
Vaara provides a one-command regulator package that exports signed trails, per-article evidence, and time anchors in a format that authorities can verify offline, helping you meet strict liability requirements.
Community reviews
No reviews for Vaara yet — be the first to leave one.
Support this launch
Members earn points for sharing, reviewing, and giving feedback on Vaara. Not a member yet?
Join Favors.dev