AIToday
Large Language ModelsAI Safety & AlignmentOpen-Source AIZenn AI/MLPublished: Oct 13, 2026, 22:00 JST

NENRIN opens AI agent logs to anyone with sha256

NENRIN opens AI agent logs to anyone with sha256

3 Key Points

  1. What happened

    Toshikatsu Oga published NENRIN, a system that stacks tamper-evident records on the public JIDEC ledger, plus two three-minute checks: hash record #95, and rebuild the nenrin-verify package from source in npm and PyPI.

  2. Why it matters

    The check confirms only that bytes and hashes match, not that a claim is true — a limit the ledger itself states in a does_not_establish field, so trust shifts from a person's employer to reproducible arithmetic.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

Oga's argument comes from his own background: he worked as a carpenter from age 15, became a site supervisor, and spent 30 years in construction, where he watched clients judge a quote by the size of a contractor's signboard. A signboard, he writes, guarantees nothing about the quote — only checking each line's quantity and unit price does. He applies the same standard to software, and to himself.

The mechanism he offers is deliberately unglamorous. Records pile onto the public JIDEC ledger and are never rewritten; when he finds an error, he adds a correction that cites the original. That happened today (2026-10-13), when he found his spec had misdescribed a figure about an MCP server — 93,983 search impressions and 0 calls were actually one listing site's admin panel views and calls via that listing. Because the spec is anchored to Bitcoin, it cannot be deleted, so he added correction #95 instead.

He names his own weak points: no outside company uses NENRIN in production, most ledger witnesses are still his own observations, and independent witnesses number only a few. He places NENRIN alongside TRACE for runtime proof, SINT for pre-execution permission control, and TrustChain for decentralized reputation, framing them as complementary rather than competing.

FAQ
What exactly can I check without trusting the author?
Two things: hash record #95 on the JIDEC ledger, and rebuild the nenrin-verify package from the public repo to compare sha512 against the registry tarball. Both run locally with Python, git, npm, openssl and tar.
Does a passing hash prove the claim inside is correct?
No. The ledger's own does_not_establish field says each record only shows that those bytes existed at that time, not that the stated claim is true.
What has the NENRIN project actually achieved so far?
An unrelated engineer rewrote the spec in Node.js and reproduced all eight monthly records byte-for-byte (JIDEC #34), and a document PR on the TRACE spec was merged (agentrust-io/trace-spec#480). Oga also says no outside company runs NENRIN in production yet.

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleMicroLLM lab runs seven tiny AI models in your browser