New Sakshi sandboxes are live. Try agent governance on synthetic data, in your browser. Get a sandboxarrow_forward
witnessThe platform

One platform. Five modules. One tamper-evident spine.

Sakshi is not another model or another dashboard, it's the accountable record beneath the agents you already run. Every agent inventoried, every decision witnessed, every action bounded, every regulator mapped, inside your own environment.

sakshi.yourbank.internal
Sakshi console, governance overview: agent inventory, decision records, chain integrity

The Sakshi console, live, agent inventory, decision volume, AI-disclosure coverage, and a chain that recomputes and verifies itself.

Predict & prevent

The governed-agent lifecycle

The five modules record and bound. On top of them, Sakshi runs the lifecycle regulators actually ask for: certify an agent before it ships, watch it in production, and catch the day it silently changes — continuous monitoring, kill switch, red-teaming and independent validation, RBI-mapped.

workspace_premium

Fit-for-production certification

No agent ships without a governance sign-off. Run the candidate through the certification battery — adversarial red-team, fairness, evaluation gates, a formally-verified autonomy policy, verified identity — for a signed, RBI-mapped certificate with an expiry and re-certification triggers.

monitor_heart

The Guardian: real-time intervention

A live monitor over the whole fleet that halts, escalates or steers the moment an agent drifts, is poisoned, or goes off-policy — using the same drilled kill switch a human would, every intervention on the tamper-evident record.

published_with_changes

Silent-change detection

Agents change silently — a model swap, a prompt injection, drift. Sakshi fingerprints each agent's behaviour and tells you the day it started behaving differently, and whether the change was declared or silent — which automatically sends it back through certification.

How it fits

A governance layer, not a rewrite

Your agents keep running where they run. Sakshi observes, governs, and records, and never sees a raw identifier.

smart_toy
Your agents
LLM apps, LangGraph, MCP hosts, vendor agents
cable
SDK or Gateway
a few lines, or zero code
verified_user
Sakshi core
tokenize PII · Register · Witness · Bound · Vidhi · Vishwas
workspace_premium
Evidence
tamper-evident chain · regulator packs · readiness
Register, KYA

Know every agent before it acts

An agent that isn't in the inventory can't record a decision. Register is the live roster of every agent and model in production: who owns it, what it's allowed to do, and where it came from.

  • check Owner, org-unit, and autonomy tier for every agent
  • check Versioned provenance: model, prompt, tools, knowledge
  • check Cryptographically verified external identity (A2A signed cards)
  • check Orphan detection: nothing runs without an accountable owner
badge agent · loan-decision-agent active · L2
Ownerpriya.sharma · retail-credit
Modelgpt-5.2 · 2026-05
IdentityA2A verified
Recertify by2026-10-01
Witness

A flight recorder for every decision

Every decision an agent makes is captured and hashed into a per-tenant chain: context, model identity, the reasoning steps, the action, and who touched it. PII is tokenized before anything is stored, and any record can be recomputed to prove it wasn't altered.

  • check Independent chain verification: catches a single-field tamper
  • check Full-text search + seq-cursor pagination over the record
  • check Idempotent capture; safe to retry
/decisions
Sakshi flight recorder, decision records with per-record chain integrity
Bound

Autonomy with a human in the loop

Envelopes decide, per action, whether an agent may act on its own, must route to a human, or must stop, by stakes, confidence, and blast radius. Oversight telemetry catches rubber-stamping, and a drilled kill switch halts a fleet the moment it drifts.

  • check auto / async-review / sync-review / block, formally lint-checked
  • check Circuit breakers on drift, error rate, and override spikes
  • check Kill switch with drills and attested recovery
rule autonomy envelope · loan-decision-agent
≤ ₹2L · confidentauto
≤ ₹15Lasync review
jumbosync review
write-offsblock
formal lint: passkill switch drilled
Vidhi

Regulator-mapped evidence, on demand

Every instrument, RBI MRM, DPDP, SEBI Reg 16C, IRDAI, is encoded as data and scored against your live evidence. A clause is "ready" only when a real check backs it, so the readiness score is honest, leverage-ordered, and directly actionable.

  • check Signed, exportable evidence packs per instrument
  • check DPDP Rule 13 DPIA + independent-auditor bundle
  • check RTI / incident (FREE-AI Annex VI) evidence exports
/readiness
Sakshi regulatory readiness, leverage-ordered gaps against RBI MRM, DPDP, SEBI, IRDAI
Vishwas

Fairness, calibrated for India

Bias testing that speaks Indian categories, gender (including transgender) and caste , computed off the live decision stream. Declared attributes wherever they exist; flags only fire on a real threshold breach and statistical significance, so the screen doesn't cry wolf.

  • check Declared-first; inference held pending counsel
  • check Inference-free locality screen (census-aggregate)
  • check Pre-deploy fairness runs as citable artifacts
balance production screen · declared attributes no flag
Gender approval gap1.4pp · n.s.
Caste approval gap2.0pp · n.s.
Locality (SC/ST share)within threshold
Significance guardtwo-proportion z

The spine

Evidence an auditor can trust without trusting you

Every record links to the one before it by hash. Anyone, your auditor, your regulator, can recompute the whole chain in your environment and confirm nothing was altered. Change a single field and the chain names exactly where.

That's the difference between a log you're asked to believe and evidence that proves itself.

# recompute the chain, in your environment
GET /api/v1/chain/verify

{
  valid: true,
  checked: 1596,
  head: "066bf27a1d6b…"
}
code

Integrate in an afternoon

A few lines with the Python SDK, or zero code through the MCP server and interception proxy. Framework middleware for OpenAI, Anthropic, Gemini, Bedrock, LangGraph and MCP.

Developer docs arrow_forward
dns

Runs where your data lives

Single-tenant, installs in your VPC or on-prem, or Rota-managed in an India region. Evidence never leaves your environment; nightly backups; one-command install.

Hosting & residency arrow_forward

See the whole platform, live

Explore the console with synthetic data, or get your own private sandbox in minutes.