For high-risk AI · EU AI Act · SR 11-7 · NIST AI RMF

Prove every AI decision.
Forever.

Rubric captures, cryptographically signs, and anchors every decision your AI systems make. Post-quantum. On a public ledger. The evidence your auditors will accept — without the manual work.

NIST FIPS 204 · SOC 2 audit in progress · 4,900+ SDK installs across organizations worldwide

Unlimited
On-ledger retention
<50μs
Signing latency
1M:1
Merkle compression
Global
—/5
nodes online
<1ms
Decision signed
ML-DSA-65 · Post-quantum · Client-side
5–10s
Merkle anchored
Batched · Independently verifiable
~30s
On-chain forever
Hedera HCS · HashScan · Immutable
~45s
ZK proof ready
Poseidon2 · Independent · Portable
The Architecture

Verifiable
without us.

Your records do not depend on Rubric staying in business, trustworthy, or online. Every attestation is mathematically verifiable by anyone, at any time, with nothing but the public key and the ledger. By design.

01 · Threshold

Three of five must agree.

Every attestation is signed by a quorum of federation nodes across five jurisdictions. No single party — including Rubric — can forge, alter, or suppress a record. Compromising the system requires compromising three sovereign data centers simultaneously.

Shamir 3-of-5
02 · Public Ledger

Anchored where no one can edit.

Merkle roots are written to the Hedera Consensus Service — a public, immutable distributed ledger with ten-year operational history. Your proof outlives any vendor relationship. An auditor in 2033 can verify an attestation made today, whether Rubric still exists or not.

Hedera HCS Mainnet
03 · Post-Quantum

Signatures a quantum computer cannot break.

Signed with ML-DSA-65, the NIST FIPS 204 post-quantum standard. RSA and ECDSA signatures written today will be forgeable within the record retention window. Rubric signatures will not. The proof you make now still verifies in 2040.

NIST FIPS 204

No vendor lock-in. No trust required. Verifiable by math.

Architecture

AI moves fast.
Truth should keep up.

Traditional compliance tools bolt on after the fact. Rubric embeds at the framework level — signing happens before any network call, anchoring happens transparently in the background. Zero latency impact on your pipeline. Works alongside any existing AI infrastructure or trust layer.

01

Local signing oracle

An ML-DSA-65 keypair is provisioned per customer at onboarding. Every AI decision is signed locally in under a millisecond — the cryptographic proof exists before any network call is made.

NIST FIPS 204 · Post-Quantum
02

Background queue

Decisions accumulate in the SDK's in-memory queue and flush to Rubric's global federation in batches. Standard flush every 5–10 seconds. High-risk decisions — credit denials, medical triage — trigger immediate flush.

Zero latency impact
03

Merkle forest anchoring

Decisions are batched into Merkle trees. A single HCS transaction anchors thousands of decisions. Each decision can be independently verified against the public root — without trusting Rubric.

SHA3-256 · Hedera HCS
04

ZK inclusion proof

After anchoring, every attestation receives a Poseidon2 Merkle inclusion proof — independently verifiable against the on-chain root without Rubric's involvement. Customers hold cryptographic evidence of their record. Not a claim. A proof.

Noir · Poseidon2 · BN254
Auto-Instrumentation

One line.
Every decision attested.

Add one line at app startup. Rubric auto-detects your frameworks and patches them at the class level — OpenAI, Anthropic, LangChain, LlamaIndex, AutoGen, CrewAI, LangGraph, DSPy, Agno, Azure AI Agents, and more. Every LLM call, every agent decision, every tool use is cryptographically attested. No per-decision code. No codebase audit. Complete by construction.

Live

Auto-instrumented

instrument() injects a callback handler into LangChain's CallbackManager at startup — every LLM call, chain output, and agent finish is attested automatically.

import autogen_rubric as rubric rubric.instrument(api_key="...") # LangChain callbacks wired automatically chain.invoke({"input": query}) # ↑ attested
Live

Auto-instrumented

2.8k total installs

instrument() patches Completions.create at the class level — every chat completion, sync or async, is attested automatically. No wrapper, no code changes.

import autogen_rubric as rubric rubric.instrument(api_key="...") # openai.chat.completions.create patched response = client.chat.completions.create( model="gpt-4o", messages=[...] ) # ↑ attested
Live

One Line. Every Framework.

2.4k total installs

Auto-instrumentation for 13 frameworks: OpenAI, Anthropic, LangChain, LlamaIndex, AutoGen, CrewAI, Haystack, Semantic Kernel, LangGraph, DSPy, Pydantic AI, OpenAI Agents SDK, and Google ADK. Zero required dependencies.

# pip install autogen-rubric import autogen_rubric as rubric rubric.instrument( api_key="your-rubric-api-key", pipeline_id="my-ai-app", ) # every LLM call now attested automatically
Live

Any MCP-Compatible Host

735 total installs

Install once via npx. Exposes 8 tools: attest, verify, get_proof, register_agent, status, framework_detect, cost_estimate, and bundle_query — works in Claude Desktop, Claude Code, Cursor, Windsurf, Continue, Zed, and any MCP-compatible host.

# claude_desktop_config.json { "mcpServers": { "rubric": { "command": "npx", "args": ["-y", "@rubric-protocol/mcp-server"], "env": { "RUBRIC_API_KEY": "..." } } } }
Live

Same 8 Tools. Native Python.

205 total installs

Same surface as the TypeScript port, native Python implementation. Built on Anthropic's official mcp Python SDK. Drop into Claude Desktop, Cursor, or any MCP-compatible host — or call programmatically from a Python agent.

# Install pip install rubric_mcp_server # claude_desktop_config.json { "mcpServers": { "rubric": { "command": "rubric-mcp", "env": { "RUBRIC_API_KEY": "..." } } } }
SIEM & GRC Integration

Fits your stack.
No integration project.

Every AI decision flows into your existing security and compliance infrastructure automatically. Real-time webhooks for Splunk and Elastic. CSV exports for ServiceNow, Archer, and OneTrust. Court-admissible PDF reports on demand. One API call — your team is operational in 30 minutes.

Live

Real-time SIEM feed

Register a webhook once. Every AI decision arrives at your SIEM endpoint in real time, HMAC-SHA256 signed, in ECS-compatible NDJSON format. Zero polling, zero gaps.

# One-time setup curl -X POST https://rubric-protocol.com/v1/webhooks -H "x-api-key: your-key" -d '{"url":"https://your-splunk/rubric","events":["attestation.created"]}' # Every attestation now flows to Splunk automatically
Live

GRC platform export

Pull attestation data as CSV on any schedule. Maps directly to ServiceNow GRC and Archer record schemas. Filter by agent, pipeline, or date range. No transformation required.

# Scheduled CSV export curl "https://rubric-protocol.com/v1/export/attestations?format=csv&from=2026-03-01" -H "x-api-key: your-key" -o attestations.csv # Import directly into ServiceNow or Archer
Live

Court-admissible reports

Generate a compliance report for any time period in a single API call. SHA3-256 hash sidecar included. Suitable for regulatory submission, board reporting, and legal proceedings.

# Generate compliance report curl -X POST https://rubric-protocol.com/v1/export/report -H "x-api-key: your-key" -d '{"org":"Acme Corp","period_from":"2026-03-01","period_to":"2026-04-01"}' # Returns: downloadUrl, sha3_256 hash, reportId
EU AI Act · Article 12

Compliance built in,
not bolted on.

Article 12 requires high-risk AI systems to maintain tamper-evident logs of autonomous decisions. Rubric provides the complete audit trail — decision content, timestamp, cryptographic proof of integrity.

01
What was decided
Full decision content captured

The complete, signed record of every AI agent decision is cryptographically captured and anchored. An auditor can retrieve and verify the precise details of any decision made at any point in time.

02
When it happened
Immutable Hedera timestamp

Every attestation receives an HCS sequence number and consensus timestamp from Hedera's public ledger. The timestamp cannot be altered — it's a time public record verifiable on HashScan.

03
That it hasn't changed
Post-quantum signature chain

ML-DSA-65 signatures bind the decision content to its timestamp. Any modification to the decision after signing produces a verification failure -- detectable by anyone, without trusting Rubric.

"The attestation layer that makes Article 12 a solved problem."

EU AI Act Article 12 enforcement begins August 2, 2026. High-risk AI systems — credit decisioning, medical triage, hiring, law enforcement — must maintain logging sufficient to enable post-market monitoring.

Rubric provides: tamper-evident decision logs, cryptographic integrity verification, publicly auditable anchoring, and an auditor portal for compliance officers — without access to Rubric's internal systems.

Enforcement deadline: August 2, 2026
Permanent Proof

Every decision gets
a public record.

Every attestation generates a permanent, tamper-evident URL. Share it with auditors, regulators, or counterparties. No login required. No trust in Rubric required. Verifiable by anyone, forever.

Cryptographically Verified · ML-DSA-65
Attestation ID
0213e72b-f452…
Signed at
Mar 17, 2026 · 10:30 UTC
Record type
Batch · 623 decisions
On-chain anchor
Hedera HCS · Topic 0.0.10416909
rubric-protocol.com/audit/0213e72b…
View live record

This is a live attestation anchored to Hedera Consensus Service. Click to verify it independently.

Global Federation · Live
US East
Singapore
Japan
Canada
EU Central
270M+ Attestations / day capacity
<50μs Local signing latency
ML-DSA-65 NIST FIPS 204 · Post-quantum
270M decisions/day across 5 continents — enough to attest every AI decision made by every major bank, insurer, and AI platform on Earth, simultaneously. GPT-4 processes ~10M requests/day globally. Rubric can attest all of them 27× over.
Technical Foundation

The architecture,
fully documented.

Post-quantum cryptography, federation design, zero-knowledge proof architecture, and EU AI Act compliance mapping — in full technical detail.

White Paper · Version 3.0 · April 2026
Rubric Protocol
The AI Accountability Standard
ML-DSA-65 · NIST FIPS 204 Hedera Consensus Service EU AI Act Article 12 ZK Inclusion Proofs · Poseidon2 5-Node Federation

10 sections  ·  Includes Two Sigma SEC enforcement case analysis  ·  March 2026

Financial Services Brief · March 2026
The $90 Million Audit Trail Problem
SR 11-7 mapping · Two Sigma case analysis · Rubric solution
SR 11-7 Model Risk SEC Enforcement MiFID II EU AI Act Article 12

2 pages  ·  Targeted at model risk officers and CROs  ·  March 2026

Pricing

Start free.
Scale when you do.

Free tier for developers. No credit card required. Upgrade when your pipeline outgrows 1,000 attestations per month.

Developer
Free
Forever
  • 1,000 attestations / month
  • 60 req / min
  • 7-day retention
  • SDK access — 13 frameworks
  • Community support
Get API Key
Standard
$999
/ month + $0.01 / call overage
  • 100K attestations / month
  • 600 req / min
  • 30-day retention
  • Bundle access
  • Email support
Get Started
Dedicated
$25,000+
/ month, custom contract
  • Dedicated infrastructure
  • Unlimited everything
  • Custom retention policy
  • Regulatory filing packages
  • Air-gapped deployment option
  • Post-quantum sovereign key management
  • 99.99% SLA
  • White-glove support
Contact Sales
Design Partner Program

9 partner spots remaining. Closes August 1, 2026.

60 days free. Full Enterprise access. $2,500/mo after pilot.

Apply for a Partner Spot →
Framework Coverage

One line at startup.
Every AI decision attested.

autogen-rubric supports 13 frameworks today with zero required dependencies. Coming integrations ship in the order enterprises ask for them.

6.4k
Total installs
1.7k
This week
15
Frameworks
1B+
Daily capacity
Live
MCP Server
npx @rubric-protocol/mcp-server@latest
Live
LangChain
pip install autogen-rubric
Live
LangGraph
pip install autogen-rubric
Live
OpenAI SDK
npm install @rubric-protocol/sdk
Live
AutoGen
pip install autogen-rubric
Live
LlamaIndex
pip install autogen-rubric
Live
CrewAI
pip install autogen-rubric[crewai]
Live
Haystack
pip install autogen-rubric[haystack]
Live
Semantic Kernel
pip install autogen-rubric[sk]
Live
Pydantic AI
pip install autogen-rubric
Live
OpenAI Agents SDK
pip install autogen-rubric
Live
Google ADK
pip install autogen-rubric[adk]
Live
Strands / Bedrock AgentCore
pip install autogen-rubric[strands]
Live
DSPy
pip install autogen-rubric[dspy]
Live
Agno
pip install autogen-rubric[agno]
Live
Azure AI Agents
pip install autogen-rubric[azure]
Live
Mastra
npm install rubric-mastra
Roadmap
Smolagents
Contact us to request priority
The Compliance Horizon

Auditable without
exposure.

At billions of AI decisions per day, audit-by-replay breaks down. Rubric’s ZK layer changes the equation: every decision your AI makes is cryptographically attested the moment it happens, with a Poseidon2 inclusion proof customers hold independently. Regulators get verifiable evidence — without ever seeing your models, your data, or your strategy. Authentic by construction. Auditable without exposure.

Phase 1 · Now
<1ms cryptographic proof
ML-DSA-65 signature at decision time. Verifiable by anyone with the public key. No network call required.
Phase 2 · Now
<5s blockchain anchor
Hedera HCS consensus. Tamper-evident timestamp. Publicly verifiable forever. No trust in Rubric required.
Phase 3 · Now
ZK inclusion proof
Every attestation is encrypted with a customer-held AES-256-GCM key — Rubric stores only ciphertext. Every attestation receives a Poseidon2 Merkle inclusion proof, independently verifiable against the on-chain root without Rubric. Customers hold both the key and the proof.