Films

The ideas, in short films.

Every one ends on something you can check or run yourself. The first three are ninety-second explainers that play in this page, with captions and no audio, a version in prose and an MP4 to share. The newer ones are narrated. All of them are on YouTube.

Two hash chains, both consistent. Which one is real?1Who wrote the log?An agent works through the night. There is a log. The agent wrote it. Why a record needs a second author, and how anyone can verify it.1:35 A timeline: the loop starts at 02:10, you wake at 07:12 to no email, the budget updates at 11:04; nearly nine hours billed2A budget alert is not a limit.Your agent's role is a company card with no ceiling. The loop that bills all night, the budget email that arrives hours late, and the limit that actually stops it.1:34 A permission list for agent-runner: s3:GetObject, sqs:SendMessage, lambda:InvokeFunction, then lambda:CreateFunction and iam:PassRole highlighted, on Resource *3The permission that is not in the log.A role that is not an administrator becomes one with two ordinary calls, and the audit trail has no event for the moment it happened. Where the evidence is, and the two lines of policy that stop it.1:32 Who wrote the log? An empty office at night, one screen still on4Who wrote the log? The narrated edition.The first film, retold from a pencil diary to hash chains to the newspaper trick behind digital time-stamping, and the two witnesses that anchor an agent's journal.2:38 · on YouTube Is the log all of it? A provider's record beside one unwarranted event5Is the log all of it?An intact log can still leave something out. How Remit checks an agent's every action against the warrant a person signed, using the cloud's own record, and what it caught first: itself.3:02 · on YouTube Try to get around it: an AI agent's DeleteBucket refused by the cloud, outside its warrant6How warrants work.An agent reaches for the customer backups and the cloud itself says no. How a warrant becomes credentials that can do exactly that, then every way to get around it, and what each one leaves on the record.2:25 · on YouTube Seal it before it reads: the same delete, gone with the standing key and AccessDenied with the sealed one7Seal it before it reads.An email tells an AI agent to delete the backups, and it does. Why a smarter model will not fix it, the 1970s bug it repeats, and the session policy that makes the cloud say no.3:44 · on YouTube

The code behind the films, and our own journal, are on GitHub. Where to go next: Remit, the free readiness check, the attestation service, the journal.