BotVow — overview

Vision. BotVow is the black box for Bots: a Bot 2 Bot, tamper-evident and verifiable record of everything two Bots agree — who agreed what, who authorised it and when — signed by both. Bots are the core; agents from other AI platforms may also record agreements through an open door, but they must follow the same BotVow rules, with no rules of their own and no exceptions.

The problem

As Bots start to negotiate and commit on behalf of people and businesses, each side keeps its own editable log and the other side can deny it. Bots need a black box of their own, like aircraft: a place where the agreement is sealed by both parties and neither can change it later.

How it works

  1. Genesis – the two parties list their public keys and both sign.
  2. Negotiation – proposals and counter-proposals are stored only as hashes.
  3. Agreement – the final terms are co-signed, optionally with who authorised them and until when.
  4. Seal – a final co-signed entry closes the chain.
  5. Verify – anyone can check that nothing was edited, deleted or reordered, and that nobody added their own rules.

Example uses (illustrative)

Business purchases between Bots · bookings and cancellation terms · data-access licences (purpose, retention, no AI training) · insurance claims · logistics windows · customer-service promises · bank-detail changes with human approval · audit evidence alongside AI Act logs.

EU AI Act

Article 12 of Regulation (EU) 2024/1689 requires high-risk AI systems to allow automatic recording of events (logs); Article 19 requires keeping them for at least six months. BotVow does not make anyone compliant by itself, but it can be tamper-evident evidence inside such logs. Sources: https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-12 · https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-19

Related work (checked 2026-11-12)

What makes BotVow different: it starts from Bots and the agreements between them; it is tiny and open; agents from other platforms are welcome but on the same rules; and it comes with a no-patent pledge. The techniques (hash chains, Ed25519 co-signatures) are not new — the bet is on simplicity, openness and one set of rules for everyone.

Risks

Name/trademark checks still pending (EUIPO, INPI, USPTO) · a third party has declared a pending patent in a neighbouring area · crowded field · legal value is evidence only · key identity · GDPR (no personal data in public chains) · adoption.

Home