Build ledger
8months from category thesis to a buyer-ready authority layer.
8 months. Engine to enterprise product.
Deliberate composition — each month names what we chose to build and what it unlocked next. No fictional traction, no customer names. Every item maps to a capability in the capability ledger.
Operating law
September 2026
First governed refund pilot — the full movie captured, replayed, and gated before merge.
- payment.refund.guard.v1 demo stack — evaluator, journey, budget admission, and simulated provider in one local pilot
- Three partner walkthrough outcomes — auto-complete, manager approval, and cap deny — captured with audit screenshots
- Replay Construct milestone — twelve digest-bound fixtures re-validate policy and lifecycle before every baseline change
- Lifecycle validation (P6) — legal transitions enforced on walkthrough evidence; dispatch cannot skip approval when required
- Independent policy-hash witness — TypeScript and Rust agree on the refund demo policy snapshot (T1 scope)
Unlocked → Observable refunds — policy decisions and lifecycle paths replay offline without signing keys.
Verify → Proof LabAugust 2026
Route factory spine shipped — every governed action gets a continuous, replayable chain.
- Route factory spine — stable route IDs, lifecycle-stamped evidence, scorecards, and graph projection
- Authority graph lane view in the operator console — same truth, two theaters (ops + partner)
- Lifecycle history on route outcomes — the full movie from discovery through proof, not a single frame
- Partner onboarding hardened — match reports, activation plans, and route cards in one cockpit flow
- agentchain.cloud migration runbook drafted — console, docs, API, and ops surfaces mapped for cutover
Unlocked → A factory, not a feature list — routes, evidence, ledger, and graph connected end-to-end.
Verify → Proof LabJuly 2026
Ghost ledger month — visible to those who look, invisible to those who scroll.
- Authority Warrant primitive — hash-addressable permission slips on every NEST_ONLY guard route
- Warrant Doctor shipped — illegal terminals blocked from becoming authority evidence across the route fleet
- Stealth-public window held — site discoverable, distribution quiet, loud launch deferred
- Public surface de-exposed — artifact IDs and integration shopping lists scrubbed from buyer-facing copy
- Independent witness lane widened — second-runtime verification now scopes to gateway guard routes, not chain paths alone
Unlocked → Universal permission law — every guarded route gets a validator-owned warrant, not ad-hoc checks.
Verify → Proof LabJune 2026
Enterprise product emerges — primitives composed into a buyer-ready authority layer.
- humbleaf.xyz live: 32-page enterprise surface, Proof Lab, and honest capability ledger
- Authority Surface Map — workflow docs in, control map out; no production credentials required
- Operational guard patterns in registry — merchant refunds and workflow dispatch, end-to-end
- Internal dogfood workflow verified end-to-end with preserved evidence
- Public claims governed — unevidenced ledger edits blocked before they reach the site
Unlocked → A buyer-ready surface — Surface Map, Proof Lab, capability ledger.
Verify → Evidence bundleMay 2026
Proof hardened — receipts verified on-chain, patterns multi-chain, deployment production-shaped.
- First receipt verified on-chain end-to-end on a test network — the loop closes, not just logs
- Full receipt lifecycle — propose, sign, verify, anchor; swap enforcement included
- Multi-surface guard path demonstrated — same authority pattern on a second execution environment
- Agent tool-access boundary adapter — tool permissions framed as an authority problem
- Hybrid deployment architecture — Guard runnable on Cloud Run and Vercel, not demo-only
Unlocked → Claims that survive on-chain and multi-chain scrutiny.
Verify → Proof LabApril 2026
Protocol becomes product — APIs, SDK, and partner demos in one sprint.
- V2 guard, policy, and receipt APIs published — integrators connect without forking internals
- On-chain anchor suite binds signer, policy, and receipt — decisions replayable years later
- Receipt flywheel: 9 PRs in one sprint — evaluation to persisted signed receipt
- Live CI automation demo — policy enforcement on real workflow dispatch
- Agent identity and payment-action guard patterns wired into the gateway
Unlocked → APIs, SDK, and partner demos integrators can touch.
Verify → Capability ledgerMarch 2026
Company incorporated. Decisions made provable — not just logged.
- Humbleaf Inc. incorporated (Delaware C-Corp)
- Receipt anchoring live on a test network — tamper-evident records, 75-test suite
- Async verification worker — actions evaluated before settlement, not reconstructed after
- Operator identity and ranking — fingerprints and pioneer leaderboard across the live network
- Public protocol UI refreshed — real operator activity visible, not mock data
Unlocked → A fundable company with provable, anchored decisions.
Verify → Capability ledgerFebruary 2026
Category thesis set: authorize actions at execution time — build the engine first.
- Protocol monorepo live — guard, gateway, contracts, and ops in one buildable stack
- First consequential automation pipeline hardened end-to-end (Client Zero)
- Agent orchestration substrate compiled — policy and execution wiring ready to compose
- Fail-closed security patterns established before any public surface
Unlocked → An execution-time authority engine everything else composes on.
Verify → Capability ledgerNext: design-partner pilots
You're early — here's where the curve bends next. We are seeking 2–3 design-partner pilots across payments, infrastructure, and agentic operations — shadow mode first, approval gates when ready.
