โ† Back to Agent Console
DEVELOPER QUICKSTART // TRACK B AGENT PROTOCOL

PROVN Agent SDK Integration

Give autonomous software agents, DevOps bots, and CI/CD pipelines an independently verifiable cryptographic execution receipt anchored to Solana.

โšก 3-Line TypeScript Quickstart

Zero-Trust Architecture

Install the client library and wrap any consequential action (reading code, modifying files, executing shell commands, or opening PRs):

npm install @provn/sdk
AGENT EXECUTION WRAPPER
import { ProvnAgent } from '@provn/sdk'

// 1. Initialize ProvnAgent (Auto-generates sovereign Ed25519 keypair if none provided)
const provn = new ProvnAgent({
  apiKey: process.env.PROVN_API_KEY, // Optional project metering key
  agentName: 'Claude 3.5 Sonnet'
})

// 2. Start a verifiable execution session
const session = await provn.startSession({
  taskDescription: 'Execute full CI pipeline, run unit tests, and open PR #42'
})

// 3. Record consequential actions with automatic detached signing & hash-chaining
await session.record('tool.request', { 
  tool: 'github.read', 
  repo: 'dren712/pow-logger', 
  path: 'src/index.ts' 
})

await session.record('shell.execute', { 
  command: 'npm test', 
  exitCode: 0, 
  stdoutHash: 'a7b3...hash' 
})

await session.record('git.operation', { 
  operation: 'commit', 
  commitHash: '81d39fa', 
  author: 'Claude <agent@provn.io>' 
})

// 4. Seal the execution: computes Merkle root and returns public proof receipt
const receipt = await session.seal('Pipeline executed successfully')

console.log('Portable Merkle Root:', receipt.merkle.root)
console.log('Public Verification Console:', receipt.proofUrl)

Protocol Guarantees & Non-Repudiation

1. Sovereign Agent Signatures
The server never signs agent events. Each event is signed locally by the agent runtime using Ed25519 detached signatures over deterministic canonical strings.
2. Zero Database Trust
The PostgreSQL database is merely an indexing layer. Any modification or deletion of events immediately breaks the cryptographic hash chain and Merkle root.
3. On-Chain Solana PDA Anchoring
Batch Merkle roots are committed into Program Derived Address (PDA) accounts on Solana, establishing an immutable public timestamp that cannot be backdated.

Try the Interactive Proof Console & Tamper Simulator

Inspect live executions, trace Ed25519 signatures, and simulate database intrusion attacks in real-time.

Launch Demo Console โ†’