# AuditPlane: Signed Decision Receipts + Replay + Drift Diffs for LLM Safety

**URL:** <https://discuss.huggingface.co/t/auditplane-signed-decision-receipts-replay-drift-diffs-for-llm-safety/172374>\
**Category:** Spaces\
**Created:** [January 11, 2026, 2:13pm UTC](https://discuss.huggingface.co/t/auditplane-signed-decision-receipts-replay-drift-diffs-for-llm-safety/172374 "2026-01-11T14:13:03Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![RFTSystems](https://sea2.discourse-cdn.com/hellohellohello/user_avatar/discuss.huggingface.co/rftsystems/32/59206_2.png) [@RFTSystems](https://discuss.huggingface.co/u/RFTSystems)\
**Post date:** [January 11, 2026, 2:13pm UTC](https://discuss.huggingface.co/t/auditplane-signed-decision-receipts-replay-drift-diffs-for-llm-safety/172374/1 "2026-01-11T14:13:03Z")

</div>

Hi all,

Most “LLM firewall” projects get stuck in architecture debates because the unit of contribution is unclear. People argue about layers, models, and heuristics, but there’s no shared way to replay decisions, audit changes, or verify claims over time.

I built a small Hugging Face Space called AuditPlane that focuses on that missing layer: the verification plane. It’s not a full safety solution and it doesn’t try to be. It’s a practical baseline for making safety decisions measurable and falsifiable.

AuditPlane produces:  
• Ed25519-signed decision receipts  
• Hash-chained runs (tamper-evident history)  
• Suite binding with stable case IDs  
• Baseline validation (exports are blocked if verification fails)  
• Replay + drift diffs (what changed, where, and why)  
• Merkle roots + inclusion proofs  
• An offline verifier bundle so anyone can check a run locally

The demo firewall in the Space is intentionally simple. The point is the receipt contract and the replay/diff workflow. If your own system can emit a standard check record (name, version, score, threshold, fired, evidence, latency), you can plug it in without exposing proprietary code and still produce third-party verifiable artifacts.

Space:

> **[AuditPlane LLM Decision Proofs - a Hugging Face Space by RFTSystems](https://huggingface.co/spaces/RFTSystems/AuditPlane__LLM_Decision_Proofs)**
>
> Ed25519-signed receipts-hash-chained runs-replay-drift diffs

Collection (context: verification-first agent forensics labs):

> **[RFTSystems: Agent Forensics Suite - a RFTSystems Collection](https://huggingface.co/collections/RFTSystems/rftsystems-agent-forensics-suite)**
>
> Audit, prove, replay, and diff agent runs—turning “trust me” into verification.

If you think this approach is missing something, the best way to show it is with artifacts: replay a suite, diff the drift, and point to where the verification breaks down. That’s the standard I’m trying to set here.

#safety #evaluation #reproducibility #agents #security #tooling

Liam,@RFTSystems No Receipt ➡ No Claim