the eu ai act asks for automatic records of what high-risk ai systems do. syen keeps them signed, chained, and verifiable by the people who ask.
article 12 of the eu ai act requires providers of high-risk ai systems to build in automatic recording of events over the system’s lifetime. the point is traceability: when an authority, an auditor, or a court asks what the system did, the answer has to come from a record made at the time, not a story told later.
the system records events as it runs. no manual log, no reconstruction after the fact.
the record captures what the system did, so a regulator can trace a decision back.
providers keep the logs available, at least six months under the act, ready for authorities.
a signed chain cannot. one changed record fails verification at that position.
a chained record detects the gap. nothing drops out silently.
an openssl verification proves the record is the one created at the time.
your auditor checks your record without access to your systems, or to ours.
every event is signed with ed25519, chained with sha-256, and anchored daily to digicert’s rfc 3161 trusted timestamp authority. the auditor verifies the whole record with openssl.
teams running agents under the act keep the agent audit trail on the same chain, and track the regulation itself with regulatory change management. see the governed workflows on the use cases page.