Skip to main content
Glama
allooloo

RCO Records

by allooloo

RCO Records — Record of Cleared Orders

RCO — the record of what the agent relied on. Every read, receipted.

Every answer the Allooloo record gives a regulated agent is receipted: one signed receipt per cleared read, chained to the one before, verifiable by anyone against a published key. The receipt is the agent's alibi.

Operator: Allooloo Technologies Corp. — https://allooloo.ai

What is in this repository

Path

What

SPEC.md

Receipt v1 — the frozen spec — and the v0 history format

sdk/typescript/verify.ts

reference verify(), verifyChain(), carry() — WebCrypto only

sdk/python/rco_verify.py

reference verify(), verify_chain() — needs cryptography

sdk/go/verify.go

reference Verify() — standard library only

worker/, public/, wrangler.toml, schema.sql, rails/

the door as it runs (Cloudflare Worker + D1)

The spec and the reference verify() ship under MIT (LICENSE). Nothing else is licensed: the chain, the keys, the door and the Register are operated by Allooloo, not licensed.

Related MCP server: APEX PSI MCP Server

Verify a receipt

node sdk/typescript/cli.ts rco:4xvpzgxxmno5bfxxmv5h
python sdk/python/rco_verify.py rco:4xvpzgxxmno5bfxxmv5h

verify(receipt, jwks) is a pure function: recompute hash (and id for v1), check sig against kid. A receipt verifies forever without asking Allooloo anything.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    Provides tools to issue, verify, and export cryptographically signed receipts for AI agent actions, enabling tamper-proof audit trails for compliance with regulations like the EU AI Act.
    4
    26 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Provides cryptographic truth infrastructure for AI agents, enabling them to seal content with SHA-256 and Ed25519, verify receipts, anchor them to Bitcoin via OpenTimestamps, generate citations, and audit chains of receipts.
    5
    59 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Issue and verify signed receipts for agent actions, enabling durable, independently checkable proof of policy decisions. Supports offline verification via get_keyset and verify_receipt tools without an account.
    0
    Inno Setup
  • A
    license
    Not graded
    quality
    B
    maintenance
    Provides tools to evaluate an AI agent's step before execution, returning signed ALLOW/DENY receipts, and to verify receipt chain integrity.
    Apache 2.0