CommandLayer

CommandLayer turns agent actions into signed, independently verifiable receipts.

Core flow

Action requested → runtime signs canonical receipt → verifier checks metadata.proof → valid receipts pass → tampered receipts fail

Verified surfaces

• Manual verifier: /verify.html
• Production proof: /stack-proof-demo.html
• Live proof hub: /proof.html
• Automatic verification demo (direct): /webhook-auto-verify.html
• Full proof flow composer (direct): /proof-flow-composer.html
• Runtime verifier: POST https://runtime.commandlayer.org/verify
• Runtime signer endpoints: POST https://runtime.commandlayer.org/trust-verification/{verb}/v1.0.0
• SDK: @commandlayer/[email protected]

SDK example

import { CommandLayer } from "@commandlayer/agent-sdk";

const cl = new CommandLayer({
  agent: "runtime.commandlayer.eth",
  privateKeyPem: process.env.CL_PRIVATE_KEY_PEM,
  keyId: "vC4WbcNoq2znSCiQ",
  verifierUrl: "https://runtime.commandlayer.org/verify"
});

const result = await cl.wrap("summarize", async () => {
  return { summary: "hello world" };
});

const verified = await cl.verify(result.receipt);
console.log(verified.status);

Canonical proof fields

• metadata.proof.canonicalization = json.sorted_keys.v1
• metadata.proof.hash.alg = SHA-256
• metadata.proof.hash.value
• metadata.proof.signature.alg = Ed25519
• metadata.proof.signature.kid = vC4WbcNoq2znSCiQ
• metadata.proof.signature.value
• metadata.proof.signer_id = runtime.commandlayer.eth

Automatic verification proof

Valid receipt:

• status = accepted
• verifier_status = VALID
• hash_matches = true
• signature_valid = true

Tampered receipt:

• status = rejected
• verifier_status = INVALID
• hash_matches = false
• signature_valid = false

Key resolution policy

• Production verification resolves signer keys from ENS TXT records: cl.sig.pub, cl.sig.kid, cl.sig.canonical, and cl.receipt.signer.
• Local key fallback is test/demo only and must be explicitly enabled with COMMANDLAYER_ALLOW_LOCAL_KEY_FALLBACK=true (or test mode).
• Verifier responses expose public_key_source as ens_txt or local_test_fallback.
• Production environment variable guidance (RPC, ENS ownership lookup, signing, and webhook/provider secrets): docs/ops/environment.md.

Trust boundaries

• Runtime signs.
• Verifier validates.
• MCP bridges.
• SDK wraps.
• Schemas describe.
• Schema-valid alone is not verified.
• Webhook sender authentication is separate from receipt verification.

Schema source of truth

Canonical CLAS schemas live in commandlayer-clas. commandlayer.org hosts docs, verifier surfaces, and selected public examples only.