The rail.
The layer between an agent and a regulated book.
Three inspectable parts: the CLP protocol, the AccordsVault runtime, and the receipt every action files.
CLP — an open protocol for governed action.
Contract Lane binds signatures, authorization checks, and payment events into portable, content-addressed proof bundles. Anyone can verify one without trusting whoever produced it. The spec is frozen at v1.0.0; the repository is Apache 2.0.
Live counts, not marketing counts — recount them in the repository.
CLP on GitHub# Contract Lane v1.0.0 — frozen protocol, three SDKsgo get github.com/accordsai/contractlane/sdk/go/contractlane@v1.0.2pip install contractlane==1.0.0npm install @contractlane/sdk# Run the conformance suite against your implementationBASE_URL=http://localhost:8082 \ ./conformance/runner/run_local_conformance.shAccordsVault — the runtime that holds the keys.
An open-source execution boundary, and the enforcement component inside AccordsAgents. Credentials stay in the vault and the mandate is applied at the boundary. The agent works with what it's granted, nothing else.
Permission scoping
Agents hold only the capabilities you grant. Least-privilege by design, not by hope.
Credential isolation
Keys never touch agent memory. AccordsVault injects credentials at runtime, inside the boundary.
Budget enforcement
Hard caps applied at execution. An agent can’t exceed its allocation, whatever it was told.
Cryptographic receipts
Tamper-evident proof of every action, verifiable without trusting the agent. Or us.
Instant revocation
Revoke in milliseconds. Credentials go dead at the boundary immediately.
Environment scoping
Test agents can’t reach production. Grants are environment-scoped by definition.
Open source. Apache 2.0. Runs where the venue runs.
Every action ends in a receipt.
Not a log line someone could edit — a portable artifact a third party can check. The specimen on the right is illustrative; its digest is real.
- FIELDS
- Typed label/value pairs — the action, the mandate, the venue check, the outcome.
- DIGEST
- SHA-256 over one canonical serialization of those fields. Change a character, change the digest.
- SIG
- ed25519 over the digest, against published venue keys. Not live yet — and the artifact says so.
The digest below is the actual SHA-256 of the specimen’s fields, computed when this page was built.
Verify one yourself- ACTION
- Buy 25,000 units · tokenized T-bill fund TBF-01
- MANDATE
- Money-market instruments only · ≤ $50,000/day · expires 2026-09-30
- VENUE
- Order admitted · agent identity ag-7f2e · mandate check passed
- OUTCOME
- Filled 25,000 @ 1.0002 · settled T+0 · receipt filed
Illustrative specimen of an Accords action receipt. The bundle hash is the real SHA-256 of this specimen’s fields — recompute it yourself. Signed receipts are what the runtime emits; this specimen claims the shape.
Read every line that gates the book.
Infrastructure a regulated venue runs has to be inspectable. The protocol and the runtime are public repositories under Apache 2.0 — an audit doesn't need our permission.
47
Conformance cases
3
SDKs
Apache 2.0
License
Accords governs what agents do on the open internet.