What is Akmon?
Akmon is a specialized security layer that provides tamper-evident, cryptographically signed verification for AI agent activities. It solves the critical auditability gap in AI automation by ensuring that session logs can be verified by third parties offline without requiring specialized proprietary software.
- Best For: Developers, security teams, and organizations needing to meet EU AI Act logging compliance.
- Pricing: Open-source (Apache 2.0).
- Category: AI Automation
- Free Option: Yes ✅
The Problem Akmon Solves
In the current AI development lifecycle, proving that an agent performed a specific action—especially under audit requirements—is surprisingly difficult. Most AI agent logs reside in volatile memory or mutable, unsigned trace files. When a regulator, security reviewer, or incident response team asks for proof of activity six months after the fact, providing an unsigned text dump is rarely sufficient.
This creates a significant compliance risk for organizations subject to regulations like the EU AI Act. Simply stating that "the AI did it" is not an acceptable audit trail for high-risk systems. You need a verifiable record that proves exactly what occurred, who authorized it, and that the logs haven't been modified since the event took place.
Akmon addresses this by treating the evidence itself as the shippable artifact. By cryptographically signing OpenTelemetry-instrumented agent sessions, it creates portable, content-addressed records. A third party can verify these records using standard, universal tools like OpenSSL, ensuring that trust is not dependent on your specific infrastructure or software stack.
In this tutorial, you'll learn exactly how to use Akmon — step by step.
How to Get Started with Akmon in 5 Minutes
- Install the CLI: Use Homebrew to install the toolset by running
brew tap radotsvetkov/akmonfollowed bybrew install akmon agef-verify. - Create a Key Pair: Generate your Ed25519 signing keys with
akmon bundle keygen --out signer.pk8 --public-out signer.pubto establish your identity. - Import Your Trace: Convert your existing OpenTelemetry agent trace file into an Akmon-compatible journal using
akmon otel import trace.json --journal ./journal. - Sign the Bundle: Export your session into a portable file and apply your digital signature using
akmon bundle sign audit.akmon --key signer.pk8. - Verify the Output: Use
akmon bundle verify audit.akmon --verify-key signer.pub --require-signatureto confirm the integrity of your newly created audit record.
How to Use Akmon: Complete Tutorial
Step 1: Establishing the Trust Anchor
The foundation of any audit trail is cryptographic identity. Before you can prove what an AI agent did, you must establish who is signing the records. Akmon uses Ed25519, a modern, high-performance public-key signature system. By generating a PKCS#8 key pair, you ensure that any record signed by your private key can be verified by anyone possessing your public key.
.pk8 file in a secure, encrypted storage location. You only need to share the .pub file with auditors or verification partners.Step 2: Importing and Converting Agent Data
Most AI agents emit data via OpenTelemetry (OTEL). Akmon acts as an importer for these existing streams. Whether your agent uses v1.37 structured forms or the older v1.36 message-event format, the otel import command parses this data into a secure journal format. During this process, Akmon captures the "level" of data, which informs the verifier how much visibility into the session remains.
full capture allows for deterministic playback, while structural capture is better for lightweight logging where full prompt data might be sensitive.Step 3: Attesting and Signing for Compliance
Simply logging data isn't enough for regulatory compliance; you must also show accountability. The attest command allows you to sign a record with an operator ID and a specific role, such as "approver" or "security_officer." This creates a cryptographic link between a human participant and the AI's autonomous actions, which is a requirement for many enterprise compliance frameworks.
Step 4: Independent Verification via OpenSSL
The defining feature of Akmon is the ability to prove a session's integrity without the Akmon software installed. Once you have a signed bundle, use akmon bundle prove-openssl to extract the statement and signature into standard binary files. An auditor can then execute a basic OpenSSL command to confirm the signature against your public key.
Akmon: Pros & Cons
| Pros | Cons |
|---|---|
| Verify offline without third-party trust. | Requires manual integration into workflows. |
| Compliant with EU AI Act logging standards. | Steep technical learning curve for non-CLI users. |
| Portable, content-addressed records. | New project with limited ecosystem support. |
| Vendor-neutral audit capability. | Relies on manual CLI operations. |
Akmon Pricing: Free vs Paid
Akmon is an open-source tool distributed under the Apache 2.0 license. Currently, there is no commercial pricing model, subscription, or "pro" version mentioned by the developers. The entire feature set, including key generation, bundle signing, and OpenSSL proof generation, is available for free.
Because the project is focused on building a vendor-neutral audit layer, it avoids the "vendor lock-in" typical of SaaS logging providers. You essentially pay for the tool with your time and technical effort, as it requires manual configuration within your existing agent pipelines. It is an ideal solution for teams that prefer self-hosted, audit-ready infrastructure.
👉 Check the latest updates and source code on the official Akmon GitHub repository.
Who is Akmon Best For?
For Developers: You want a verifiable way to track agent telemetry without relying on proprietary logging platforms. Akmon fits into your existing CI/CD pipeline using standard OpenTelemetry exports.
For Security Reviewers: You need a way to audit AI agent behavior years after an event occurs. By having a cryptographically signed record, you can prove the logs haven't been tampered with since they were created.
For Regulatory Compliance Teams: You are tasked with ensuring your organization meets EU AI Act logging obligations. Akmon provides the evidence-based approach necessary to satisfy auditors who demand proof independent of the agent provider's cloud dashboard.
Alternatives to Akmon
Common alternatives include standard observability platforms like LangSmith or Arize Phoenix, which provide excellent real-time monitoring and tracing. Other options involve generic log-signing services or custom-built hash chains using blockchain or immutable database ledgers. However, Akmon is the superior choice for niche compliance needs because it eliminates the need for a third-party service entirely, allowing for permanent offline verification using standard industry tools.
Final Verdict: Is Akmon Worth It?
If you are building an AI agent that requires high-assurance logging for regulatory compliance, Akmon is an essential addition to your stack. It provides a unique, future-proof way to maintain an audit trail that doesn't rely on the continued existence of a specific cloud vendor.