When AI incidents happen, you don't get to guess. You get to replay.
BLACK BOX captures every decision, seals every event, and replays the exact sequence — making AI security incidents provable in court.
BLACK BOX operates as a continuous, cryptographically-sealed record of every event in an AI agent session. Three layers — CAPTURE, EVIDENCE CHAIN, and REPLAY — work together to make every incident reconstructable from first principles.
Every AI agent session is broken into 10 structured capture streams. Each stream is independently queryable, hashable, and replayable. Together they give a complete forensic picture of what the agent did, decided, and why.
Every event appended to BLACK BOX is immediately hashed and chained to the previous event. The resulting chain is dual-signed and cannot be modified without breaking the hash sequence — making every session record court-admissible.
Each event record contains the SHA-256 hash of the previous record. Any modification to any event in the chain immediately invalidates all subsequent hashes, making tampering detectable with zero false-negative risk.
All chain records are dual-signed — Ed25519 for current interoperability and ML-DSA-65 (CRYSTALS-Dilithium, NIST FIPS 204) for post-quantum resistance. Both signatures must verify for a record to be accepted as authentic.
Events are written to an append-only JSONL flat file for streaming and archival, and indexed in SQLite for fast structured queries. Neither store permits deletions or modifications after write. Crash recovery uses the PARTIAL_CHAIN flag with session.seal().
Every BLACK BOX session is assigned a globally unique BBX-{hex12} identifier at capture start. The session ID appears in all signed records, all export bundles, and all STIX 2.1 Campaign Graph exports. Session IDs are collision-resistant and cannot be predicted in advance.
BLACK BOX sessions can be exported as STIX 2.1 bundles for integration with NIGHTFALL Campaign Graph. Exported bundles carry the full BBX hash chain alongside STIX Observed-Data, Sighting, and Campaign objects for end-to-end incident correlation.
BLACK BOX uses a four-tier gate system. CAPTURE and VERIFY are ungated so that recording can never be blocked by a missing key. REPLAY and EXPORT require cryptographic keys — ensuring that only authorised operators can access session contents.
BLACK BOX is designed from the ground up to support regulatory and legal requirements for AI incident documentation. Built-in compliance mappers generate structured evidence packages for each framework.
BLACK BOX integrates natively with four AI Shield modules to pull existing detection and telemetry records into the session evidence chain. When an AI Shield module fires during a captured session, its report is automatically incorporated into the BBX hash chain.
BLACK BOX is distributed as a Python package. Generate your operator key pair on first install. CAPTURE is active immediately — no configuration required to start recording.
NIGHTFALL attacks. AI Shield defends. BLACK BOX records — so that when an incident happens, you have provable, court-admissible evidence of exactly what the AI did, decided, and why. No guessing. Replay.