GhostLogic

GhostLogic builds the independent record for a world of autonomous systems.

Software now acts faster than anyone can watch it. GhostLogic builds hardware and software that observe digital activity from the outside, preserve it beyond the reach of the system that produced it, and reconstruct what happened when someone finally asks. Two product families today. One principle underneath both.

Explore Products Why GhostLogic →

INDEPENDENT EVIDENCE · AI ACCOUNTABILITY · TAMPER-EVIDENT RECORDS

What GhostLogic builds

Two product families. One company.

GhostLogic products observe different control points — a computer, a network, a workstation, an AI agent. They are built by the same company, on the same principle, and they are sold as what they are: distinct products with distinct jobs.

A GhostLogic product family

GhostLogic Evidence

For computers, networks, investigations and high-trust environments.

First production run — expected Q1 2027

Independent evidence for the systems you already run.

Record supported activity on a computer, preserve it outside the machine that produced it, and reconstruct the sequence afterward. Flight Recorder starts at one computer; GhostRouter, Core and Core Pro extend the same architecture across networks and workstations.

Explore Evidence Systems →

White APS Mini and APS units, each marked GPS for AI, lit along one edge in green

A GhostLogic product

Agent Curfew

For AI agents.

Ships November 1, 2026

GPS for AI.

Know where an agent worked, what files it touched, which tools it used, which commands it ran, and whether it crossed a boundary you defined. Agent Curfew observes the agent from outside the agent, and has its own hardware line in APS Mini, APS and APS Pro.

Explore Agent Curfew →

From GhostLogic

Agent Curfew

GPS for AI.

AI agents work across files, shells, browsers, APIs, MCP tools and authenticated accounts faster than a person can supervise them. The agent’s own summary of that work is a claim, not a record.

Agent Curfew gives an agent’s movement an observable record. It watches the boundary between the agent and everything the agent reaches, so the account of a session does not come from the thing being investigated.

Where did the agent work?
What files did it touch?
Which tools did it use?
Which commands did it execute?
Did it cross a boundary you defined?

Visit Agent Curfew →Why GhostLogic built it →

Agent Curfew has its own site, its own product identity and its own purchasing flow at agentcurfew.com.

Agent Curfew hardware

APS MiniOne person. Moving between machines.
APSOne desk. Always recording.
APS ProMany agents. One verified record.

Ships November 1, 2026

APS is Agent Curfew’s hardware line. Configurations and pricing are published on the Agent Curfew site.

The GhostLogic thesis

Different products. One principle.

The record should exist before the question.

GhostLogic does not start from what went wrong. It starts from the assumption that nobody knows yet which action, file, account, tool or moment is going to matter — and that by the time they do, the system that could have answered has usually moved on, rotated its logs, or been replaced.

Observe

Watch supported activity from outside the system performing it.

Record

Turn what was observed into canonical, structured records.

Seal

Bind those records into a tamper-evident cryptographic chain.

Preserve

Anchor the evidence off-host, so the source does not control the only copy.

Reconstruct

Return the surviving evidence as one ordered, inspectable timeline.

A Flight Recorder applies this to one computer. Agent Curfew applies it to an AI agent’s movement. The control point changes. The discipline does not.

No AI inside

GhostLogic does not use AI to judge AI.

GhostLogic collection, integrity checks, and assessments are deterministic. The same evidence produces the same result every time. No model interprets your activity. No algorithm guesses what probably happened. No AI decides whether another AI should be trusted.

GhostLogic records observable events, verifies the continuity of the evidence, and discloses what the record can—and cannot—establish.

The only intelligence operating GhostLogic is yours.

The portfolio

Where each product sits.

Every GhostLogic product answers the same question at a different control point. Detailed specifications, capacities and current terms live on each product page.

GhostLogic Evidence

For computers, networks, investigations and high-trust environments.

Evidence systems

GhostLogic Flight Recorder

One computer. One independent witness.

AI can move through a computer in seconds. Flight Recorder keeps the record.

$299 · Explore →

Infrastructure

GhostRouter

Know what network your devices are depending on.

Trust can change after you connect.

$399 · Explore →

GhostLogic Core

The permanent control point for the workstation.

Bring the computer, network and evidence record together.

$899 · Explore →

GhostLogic Core Pro

Let AI analyze the evidence without giving it authority over it.

Let AI analyze the evidence. Never let it own the evidence.

$2,999 · Explore →

All Evidence products →Compare products →

Agent Curfew

For AI agents. Where they worked, what they touched, and whether they crossed a boundary.

Agent Curfew hardware

The technology

Evidence should not pretend to know more than it knows.

GhostLogic separates levels of knowledge instead of flattening everything into one confident-looking answer. These classifications are rule-based and deterministic.

Agent-recorded

The information appears only in the agent’s transcript or output.

Observed

The collector directly observed it.

Corroborated

Two or more independent sources support the same finding.

Verified

The finding was directly validated against acquired evidence.

Not established

The available evidence cannot determine the fact either way.

TICS

Continuity and integrity are scored separately through TICS, which reports one of three states.

TrustedCautionDo Not Trust

Tamper-evident means a change, gap or broken chain is designed to become detectable — not that evidence is impossible to alter.

How GhostLogic works →Evidence architecture →

Real evidence

The agent said it created something. GhostLogic checked.

Case GL-20260812-001 reconstructs a real Codex CLI session from acquired transcripts, audit logs, filesystem observations, manifests and SHA-256 digests. The agent reported creating two artifacts. GhostLogic independently found 449 numbered files, preserved them, and reconstructed the completed result. The second claimed file was not found within the documented acquisition scope — and GhostLogic did not guess why. It reported the claim accurately: Not established.

1.06 GBEvidence acquired

5Independent source groups

449Numbered files verified and reconstructed

Read the Sample Report →Download the PDF

Sample report · demonstration evidence · case GL-20260812-001

Who GhostLogic builds for

Wherever software can act, attribution matters.

Developers operating AI agents

Know what the agent actually did — not only what it reported doing.

Agent Curfew

AI-heavy teams

Preserve tool calls, commands, file changes, browser actions, results and failures across everyone running agents.

Agent Curfew

Businesses and enterprises

Maintain an independent record when software operates through employee accounts, company systems or customer data.

Both families

Investigators and incident responders

Reconstruct the sequence an incident, attacker or cleanup process might otherwise destroy.

GhostLogic Evidence

Insurers and counsel

Separate claims, observations, corroborated findings, verified facts and disclosed limitations in one ordered record.

GhostLogic Evidence

Remote operators and travelers

Record the networks and systems you depend on but did not build and do not control.

GhostLogic Evidence

Explore Solutions →

The company

We built the witness we wanted to have.

GhostLogic exists because increasingly autonomous software can act faster than people can meaningfully supervise it. The answer to that is not more dashboards, and it is not asking a system to grade its own history.

The record needs to exist independently — outside the system that produced it, ordered, integrity-checked, and honest about its own gaps.

Evidence that does not require belief.

About GhostLogic →

Buying GhostLogic Evidence today

Three Hundred Thirteen Founders.

The individually numbered first production run of the GhostLogic Evidence Collector: one orange EVIDENCE Collector per founder, numbered 001/313 through 313/313. Once the run is complete, it will never be reproduced.

Founder numbers are assigned only after payment is confirmed. Full terms, capacities and what every founder receives are on the program page.

See the full program →Browse all products →

The orange GhostLogic EVIDENCE Collector marked 0.5TB, lit along both edges, photographed on black

The record starts now

Know what happened.

GhostLogic builds independent evidence systems for computers, networks, investigations and AI agents.
Different products. One principle.

Explore Products Talk with GhostLogic →