I built an accountability layer for AI agents — bound what it can do before it acts, prove what it did after

Most teams I talked to hit the same wall: give an agent real capability (move money, ship a change, touch an account), it does one thing you can't defend later, and the whole thing snaps back to human-in-the-loop. Cinchor is one primitive that does both halves. Bound before: you mint a capability scoped to a single agent (spend cap, allowlist, expiry). Every action gets checked against it, and an out-of-policy action is refused before it happens. Prove after: the decision is hashed, signed, and anchored append-only, so anyone can recompute it later and catch a tampered field. There's a live demo you can run in about 30 seconds with no signup: give an agent a budget, watch it get allowed twice and then blocked when it goes over, verify the record, then tamper with a field and watch the check reject it. It works with any agent stack. There's an API plus client SDKs in TypeScript, Python, and Go, all Apache-2.0, so you can read exactly what gets hashed and signed. No token, no wallet, no gas anywhere in the path. Demo, SDKs, and a writeup on how it works (and what's real vs. still early) are in the first comment. The feedback I most want: where this is wrong, where it's redundant with something you already trust, or where you'd never put a third party in the path.