Coming soon Pyx is in development at AURA Labs. Register interest →
AURA Labs · Agentic assurance

What is Pyx?

Pyx is guaranteed assurance for agentic workforces. Every step from human intent to recorded outcome is sealed as evidence when it happens. The board can verify that evidence without trusting the operator.

The shift

Agents now act inside systems of record

86%

of UK financial firms use AI

FCA, October 2026
85%

of large US firms have agents acting without real-time human involvement

EY survey, September 2026
26%

cannot detect unauthorised agents

EY survey, September 2026
49%

have not updated their governance for agents

EY survey, September 2026
The evidence behind those agents has not kept pace with the work they do.

Between April and October 2026, APRA, MAS, the FSB, the HKMA and the FCA each set out expectations that reach AI agents. Together they ask for accountability anchored to intent, an inventory of agents, oversight scaled to autonomy and continuous assurance.

The problem

Boards sign for agent work they cannot see

Regulated firms are building agent workforces faster than they are making them assurable.

Today: how an agent's action reaches the board's signature
Agent decisions Thousands a week

Each one touches channels, models, workflows and core systems.

Evidence, spread across five systems
  • Channelthe customer's words
  • Model tracethe output, if anyone logged it
  • Workflow toolan approval click
  • Core systemthe change, with no reason attached
  • Case systema review, weeks later
Rebuilt by hand Management's summary

Compiled after the fact, from records the operator controls.

The gap The board's attestation

Rests on evidence the board never saw and cannot check.

The supervisor's question

Who decided what, on whose authority, with what evidence, with what oversight?

Asked of one agent action, it should take seconds to answer. Today internal audit rebuilds the answer by hand, after the fact.

The board's exposure

Governance codes make boards and named senior managers answerable for what agents do. Their evidence still arrives through management. A well-behaved agent population and a well-policed one look the same from outside.

How it works

Pyx sits between agents and the systems they act on

Agents reach systems of record only through Pyx. Every record lands in a log that witnesses outside management co-sign. The board's verifier reads from those witnesses, so the board checks the evidence for itself.

Where Pyx sits Inside the firm, principals give agents their intent. Agents reach systems of record only through Pyx. Its gateway observes, receipts and gates each action, its Control Agent checks each Action Warrant, and its authority comes from mandates signed by senior managers. Every record lands in Pyx Seal, an append-only log. Independent of management, an internal audit witness and an external assurer witness co-sign the log. Pyx Trial takes their checkpoints and reports verdicts to the board and audit committee. A supervisor can run its own witness and Trial by agreement. INSIDE THE FIRM Principals Customers, staff and triggering events intent Agents Any model, any framework, over MCP or A2A actions Pyx Gateway: observes, receipts, gates Control Agent: checks each Warrant Mandates from senior managers authorised Systems of record Core banking, payments, cards and CRM every record Pyx Seal Append-only, co-signed log co-sign the log INDEPENDENT OF MANAGEMENT Board and audit committee verdicts Pyx Trial Reruns every claim against the evidence checkpoints Internal audit witness External assurer witness Supervisor Runs its own witness and Trial, by agreement Where Pyx sits Inside the firm, principals give agents their intent. Agents reach systems of record only through Pyx. Its gateway observes, receipts and gates each action, its Control Agent checks each Action Warrant, and its authority comes from mandates signed by senior managers. Every record lands in Pyx Seal, an append-only log. Independent of management, an internal audit witness and an external assurer witness co-sign the log. Pyx Trial takes their checkpoints and reports verdicts to the board and audit committee. A supervisor can run its own witness and Trial by agreement. INSIDE THE FIRM Principals Customers, staff and triggering events intent Agents Any model, any framework, over MCP or A2A actions Pyx Gateway: observes, receipts, gates Control Agent: checks each Warrant Mandates from senior managers every record authorised Pyx Seal Append-only, co-signed log Systems of record Core banking, payments, cards, CRM co-sign the log Internal audit witness External assurer witness checkpoints Pyx Trial Reruns every claim against the evidence verdicts Board and audit committee Supervisor Runs its own witness and Trial, by agreement INDEPENDENT OF MANAGEMENT

Connects toidentity providers · GRC and AI governance platforms · SIEM and observability · model governance · the SAFR reference implementation

Signed by its author

Each record carries the signature of the party responsible for it.

Receipted as it happens

A gateway separate from the agent receipts every record, in order.

Held in a co-signed log

Witnesses outside management co-sign the log, so any rewrite is detectable.

No record, no action. The gateway passes nothing to a system of record without a valid Authorisation, and fails closed.
The product set

Four parts make one chain of evidence

Each part does one job. Together they join human intent to recorded outcome in a single record.

Pyx Witness

Plugs into or stands beside an agent. Records every step, and refuses any action without an Authorisation.

Pyx Protocol

The records, signatures and agent classes a firm uses to prove assurance.

Pyx Seal

An append-only log. Witnesses outside the management line co-sign its checkpoints.

Pyx Trial

The board's verifier. Recomputes management's attestation, claim by claim, from evidence it fetches itself.

The world's highest bar is our lowest level

For every control, Pyx adopts the strictest requirement found anywhere. Local profiles add detail and longer periods. The bar only moves up.

Getting started

Start with a census, finish with a Trial

1

Census

Inventory every agent, place each in an onboarding state, and show the board where the workforce stands.

OutputA census the board can read
2

Gate

Put one material agent class behind the gateway and take it to the global baseline.

OutputOne agent class assured at the global bar
3

Trial

Your assurer runs a Trial on one board attestation, using evidence it verifies itself.

OutputA verified attestation

Where Pyx stops. Pyx guarantees properties of the evidence and of the gate. Whether an agent's judgement was right stays with model governance, conduct risk and the board.

Sealed when the work is done. Tested by someone independent.

The name comes from the Trial of the Pyx. Since the Middle Ages, sample coins from the Royal Mint have been sealed in a box called the pyx. An independent jury tests them at Goldsmiths' Hall. Pyx does the same for agent actions.

Get in touch Read Governance at Agent Speed