EPI — Evidence for AI agents

Record. Seal. Verify offline. The answer is a file.

pip install epi-recorder
epi demo --no-browser    # record → seal → verify (no API key)

60-second path · With OpenAI · Integrations · CLI · Standards

When someone asks what your agent did six months ago,
the answer should be a .epi file — not a dashboard login and a shrug.

epi-recorder captures agent decisions into a portable, signed, offline-verifiable artifact.
No phone-home required to open or verify.

60-second path

Works without any LLM API key:

# demo.py
from epi_recorder import record, get_current_session

with record("demo.epi", goal="show the golden path"):
    s = get_current_session()
    s.log("tool.call", tool="lookup", id="A-1")
    s.log("tool.response", ok=True, balance=250)
    s.log("decision", action="approve", reason="within limit")

python demo.py
epi verify demo.epi
epi view demo.epi

Typical first-run verify:

DECISION: WARN on first verify is normal — integrity and signature still pass.
Trust identity with: epi keys trust <name> after epi keys list.

That’s the product. Everything below is optional depth.

With OpenAI

from openai import OpenAI
from epi_recorder import record, wrap_openai

client = wrap_openai(OpenAI())  # needs OPENAI_API_KEY

with record("agent.epi", goal="Answer a user question"):
    client.chat.completions.create(
        model="gpt-4o-mini",
        messages=[{"role": "user", "content": "Hello"}],
    )

python agent.py
epi verify agent.epi
epi view agent.epi

API keys in prompts/headers are redacted automatically before they land in the file.

What a .epi file is

Every .epi uses the Envelope v2 container format — a polyglot HTML+ZIP binary that opens natively in any browser and can be extracted programmatically.

demo.epi
├── manifest.json     # Ed25519 signature + SHA-256 file hashes
├── steps.jsonl       # Timeline (hash-linked steps)
├── environment.json  # Runtime snapshot (sensitive env redacted)
├── viewer.html       # Offline forensic UI
└── VERIFY.txt        # Plain-text auditor instructions

Integrations

# LangChain
from epi_recorder.integrations.langchain import EPICallbackHandler
llm = ChatOpenAI(model="gpt-4o-mini", callbacks=[EPICallbackHandler()])

# pytest — attach evidence to failing tests
pytest --epi

More: docs/FRAMEWORK-INTEGRATIONS-5-MINUTES.md

CLI

Security defaults

• Redaction is on (redact=True). Keys/tokens/PII become ***REDACTED***:… placeholders.
• Prefer not using redact=False in production (it warns).
• Verification is local — no network required for integrity/signature.
• First-run identity WARN is expected until you trust your key.

Standards & compliance

EPI produces evidence files that help with audit trails. It is not a compliance guarantee and does not provide legal advice. Whether evidence satisfies a specific regulatory threshold is for the auditor or notified body to determine.

epi verify agent.epi --aiuc1   # optional domain scoring

Troubleshooting

Project layout (contributors)

Website edits: only under website/, then python scripts/sync_website.py.

License

MIT — see LICENSE.

Site: epilabs.org · Issues: GitHub Issues