nobulex

Credit scores for AI agents. Every action builds a verifiable track record.

Credit scores exist for people. They don't exist for machines. Until now.

Install

pip install nobulex

Quick Start

One line to add receipts to any function:

from nobulex import track

@track(agent_id="my-agent")
def send_email(to, subject, body):
    return smtp.send(to, subject, body)

# Every call produces a signed receipt. Exceptions produce DENY receipts.
send_email("user@example.com", "Hello", "Report attached")
print(send_email.receipts)     # tamper-evident
print(send_email.trust_score)  # accumulates over time

Or use the Agent API directly:

from nobulex import Agent

agent = Agent("my-agent")
receipt = agent.act("send_email", scope="user@example.com")
assert receipt.verify()  # Ed25519 signature check
print(receipt.action_ref)  # SHA-256 hash of the action

# trust score builds with every verified action
print(agent.trust_score)  # 13.86

# Denied actions prove the system caught violations
agent.deny("delete_database", scope="production")
print(agent.trust_score)  # 15.22

What is this?

Every time an AI agent does something, Nobulex generates a cryptographic receipt:

• WHO acted (agent_id)
• WHAT they did (action_type)
• ON WHAT (scope)
• WHEN (timestamp_ms)
• WHETHER it was allowed (verdict)
• PROOF it happened (Ed25519 signature + SHA-256 hash)

Receipts are tamper-proof. You can't edit them after the fact. You can't fake them. An independent verifier can check any receipt without trusting the agent.

Over time, receipts build into trust score - a portable trust score that follows the agent across deployments. You can copy an agent's code, but you can't copy its credit score. The copy starts at zero.

Use Cases

• Audit trails: Prove what your agent did to regulators (EU AI Act Article 12)
• Agent-to-agent trust: Agents verify each other's track records before collaborating
• Compliance: Tamper-evident records for financial, healthcare, and legal agents
• Accountability: When something goes wrong, receipts prove what happened

API

Agent

from nobulex import Agent

agent = Agent("my-agent")          # Create agent identity
receipt = agent.act("tool_call",   # Record an action
                    scope="api.stripe.com")
agent.deny("unauthorized_action",  # Record a caught violation
           scope="admin_panel")
print(agent.trust_score)           # Get trust score score
print(agent.receipts)              # Get all receipts

Receipt

from nobulex import Receipt, KeyPair

keys = KeyPair()
receipt = Receipt.create(
    agent_id="agent-1",
    action_type="send_email",
    scope="user@example.com",
    keys=keys,
)
assert receipt.verify()            # Verify signature
print(receipt.action_ref)          # Content-addressable hash
print(receipt.to_json())           # JSON serialization

Framework Examples

Working examples for all 6 supported frameworks (each runs standalone):

python examples/pydantic_ai_receipts.py   # PydanticAI
python examples/crewai_receipts.py        # CrewAI
python examples/langchain_receipts.py     # LangChain
python examples/google_adk_receipts.py    # Google ADK
python examples/haystack_receipts.py      # Haystack
python examples/llamaindex_receipts.py    # LlamaIndex

Verify API

The SDK is free. The hosted verification layer is the product.

curl -X POST https://api.nobulex.com/v1/verify \
  -d '{"agent_id":"my-agent","action_type":"tool:search",...}'

Pricing | API docs | Methodology

License

MIT - Arian Gogani (@nobulexlabs)