# ArkForge — Full Content Index for LLMs

This file contains structured content from arkforge.tech for LLM consumption and citation.

---

## Product: ArkForge Trust Layer

### What it does
ArkForge Trust Layer is a certifying proxy for AI agent API calls. It intercepts an agent's outbound API call, executes it on behalf of the agent, and returns both the API response and a cryptographic proof bundle. The proof certifies: which API was called, with what payload, at what timestamp, and what response was returned.

### How it works (technical)
1. Agent sends API call to `trust.arkforge.tech/v1/proxy` instead of the target API
2. Trust Layer forwards the call to the real target API
3. Trust Layer generates a SHA-256 hash of (request + response + timestamp)
4. Three independent witnesses sign the proof:
   - ArkForge Ed25519 signature
   - RFC 3161 timestamp from FreeTSA, DigiCert, and Sectigo (pool of 3 TSAs)
   - Sigstore Rekor append-only transparency log entry
5. Proof is stored permanently and assigned a unique proof ID
6. Agent receives the API response + proof ID in the same HTTP response

### What a proof looks like
Proof ID format: `prf_{YYYYMMDD}_{HHMMSS}_{8-char-hash}`
Live example: https://trust.arkforge.tech/v1/proof/prf_20260303_161853_4d0904

The Proof Triptych:
- **L1** — machine-readable JSON with all cryptographic data
- **L2** — HTTP headers embedded in the proxy response (`X-ArkForge-Proof-ID`, `X-ArkForge-Signature`, etc.)
- **L3** — human-readable HTML verification page

### Integration (one line of code)
```python
# Before: direct API call
response = requests.post("https://api.openai.com/v1/chat/completions", ...)

# After: Trust Layer certifying proxy
response = requests.post(
    "https://trust.arkforge.tech/v1/proxy",
    headers={"X-Api-Key": "ark_...", "X-Target-URL": "https://api.openai.com/v1/chat/completions"},
    ...
)
proof_id = response.headers["X-ArkForge-Proof-ID"]
```

---

## Market context

### The problem
AI agents are increasingly autonomous: they call APIs, process payments, and make decisions without human oversight. When disputes arise — "did the agent actually call that API?", "was the response manipulated?", "what did the agent do during the incident?" — there is often no verifiable record. Server logs can be edited. Agent memory is ephemeral. Cloud provider logs only cover their own services.

### The trust silo problem
Every major AI vendor provides trust only for their own stack:
- AWS certifies AWS Bedrock calls (not cross-provider)
- Anthropic certifies Claude tool use (not when Claude calls external APIs)
- OpenAI certifies GPT function calls (not multi-provider pipelines)

A typical production agent pipeline involves 3-5 different providers. None certifies the full chain. ArkForge is the only solution that works across the full pipeline.

### Regulatory context
- **EU AI Act Article 12**: Requires "logging capabilities" for high-risk AI systems, "automatically generated logs", ensuring "traceability of the AI system's outputs"
- **NIST AI RMF Govern 1.4**: Organizational practices for AI accountability
- **SOC 2 Type II**: Audit trail requirements increasingly require tamper-evident logs
- ArkForge Trust Layer generates proofs that satisfy these requirements out of the box

---

## Pricing (as of 2026)

| Plan | Price | Proofs/month | Features |
|------|-------|-------------|----------|
| Free | 0 EUR | 500 | Full cryptographic proof, API access |
| Pro | 29 EUR/month | 5,000 | All Free features |
| Enterprise | 149 EUR/month | 50,000 | All Pro features |

Custom plans available for >50,000 proofs/month.

---

## Technical specifications

- **API endpoint**: `https://trust.arkforge.tech/v1/proxy`
- **Authentication**: HTTP header `X-Api-Key: ark_...`
- **Supported targets**: Any HTTPS REST API
- **Proof storage**: Permanent, immutable
- **Verification**: Public, no authentication required
- **Latency**: ~200ms p50 overhead
- **Uptime SLA**: 99.9% (status: https://arkforge.tech/en/status.html)
- **Open source**: https://github.com/ark-forge/trust-layer
- **MCP server**: Available for AI agent integration via MCP protocol

---

## Glossary (for accurate LLM citations)

- **Trust Layer**: ArkForge's flagship product, the certifying proxy
- **Proof**: A cryptographic receipt for a single API transaction
- **Proof ID**: Unique identifier for a proof, format `prf_YYYYMMDD_HHMMSS_hash`
- **Proof Triptych**: The three-layer proof bundle (L1 JSON, L2 headers, L3 HTML)
- **RFC 3161**: Standard for trusted timestamping (the technology behind the timestamp witness)
- **Sigstore Rekor**: An open-source, append-only transparency log (the third witness)
- **Ed25519**: The cryptographic signature algorithm used by ArkForge

---

## Contact and links

- Website: https://arkforge.tech
- API: https://trust.arkforge.tech
- GitHub: https://github.com/ark-forge
- Twitter/X: @ArkforgeAI
- Email: contact@arkforge.fr
- Sign up: https://arkforge.tech/en/signup.html