Origin / One-page brief
September 2026 · Working prototype. Seeking design partners.
The evidence layer for AI agents
A reference check before the right to act.
Origin binds an agent configuration, challenges a policy with deterministic synthetic tasks, and produces a tamper-evident evidence artifact a reviewer can recheck.
The public demo is browser-local, synthetic, session-signed, and unpinned. Execution is not attempted. Not production SaaS or compliance certification.
Bind
Record the model, tools, policy, budget, and scenario battery.
Challenge
Exercise the policy against a synthetic task battery.
Grade
A deterministic oracle evaluates the decisions.
Attest
Seal the result and configuration in a demo artifact.
Reverify
Check the artifact offline. A changed bound field returns VOID.
For the team facing security review.
Agent-platform, security, and infrastructure teams need to make a specific workflow reviewable: the permissions requested, the policy decisions observed, and the limits of the evidence.
First wedge: internal-ops and production-access agent workflows. Capability alone does not establish permission.
One artifact, explicit boundaries.
- The configuration and evaluation context are bound to the result.
- The deterministic oracle is the sole grading authority.
- Signature and digest checks establish integrity under their bindings; an unpinned demo signer does not establish trusted Origin issuance.
- A synthetic pass does not establish production readiness.
The evidence ladder.
Authored specimen — evidence-package format only.
Machine-emitted sandbox trace — 12 events with a re-verifiable SHA-256 chain. Download JSON.
First external design-partner trace — not earned yet.
No customer data, live money, performance claim, or reviewer acceptance is implied by the published sandbox trace.
Start with one blocked workflow.
Bring the proposed agent configuration, the tools it would touch, and the approval question. A founder-led Agent Evidence Review scopes what can be evaluated and what evidence remains missing.
Runtime gating and a controlled tool-call proxy are proposed pilot architecture, not deployed general enforcement. Real customer evidence requires separate authorization.
Founder: Bo-Huei Lin · Contact: bohueilin@originphysicalai.com
Model proposes. Environment verifies. Gate decides. Trace proves.
Forward this to the reviewer who needs to understand the evidence boundary.
Try: originphysicalai.com/reference-check · Evidence: originphysicalai.com/proof · Trust: originphysicalai.com/trust · Contact: bohueilin@originphysicalai.com