BLOCKCHAIN LAB BRIEFING · AI AGENTS
A Checkable Record Is Not an Agent That Was Right.
Mysten Labs and Google Cloud have announced Verifiable Agent Arbiter: private telemetry in the customer’s storage, proofs on Walrus, coordination on Sui. The product is evidence. It is not a verdict.
- Stays with the customerPrompts, model outputs, tool calls and policy decisions.Held in customer-controlled Google Cloud Storage.
- Can be checked outsideCryptographic proofs of that record, on Walrus.Coordination of those proofs on Sui.
The point of the split is that a counterparty can check integrity without receiving the raw prompt, the output, or the policy text.
Mysten Labs, 6 October 2026.
01
What happened
On 6 October 2026 Mysten Labs announced Verifiable Agent Arbiter, developed with Google Cloud. The company describes it as an evidence layer: enterprises should be able to show that an AI agent acted within the authority it was given. Detailed telemetry stays in customer-controlled Google Cloud Storage. Cryptographic proofs of that record are stored on Walrus and coordinated on Sui.
The announcement names dispute resolution for agent-to-agent work, security investigations, and a link to agent payments. It invokes regimes such as the EU AI Act as a reason enterprises will want the record. It does not publish a general-availability date, a full specification, or commercial terms.
02
Why it matters
The useful sentence is the negative one. This is not “put the model on a chain.” It is “make a record of what the agent did that someone else can check.” Firms that will not publish raw prompts can still offer a proof that the retained file was not altered.
That is a real architectural split, and it is easy to oversell. A tamper-evident log of a bad decision is still a log of a bad decision. An agent can follow an authorised workflow and act on a wrong input. A verifier can confirm what was recorded and still miss what was never written down.
03
The operating layer
Treat VAA, when it is available, as one component beside logging, identity, permission and failure handling. The payment example is the clearest test: an agent buys an external service under a spending mandate. A useful trail connects the instruction, the authorisation, the payment and the service response. A payment hash alone does not.
Hardware-backed attestations, of the kind other stacks have emphasised, answer a different question: what code ran. Workflow evidence answers what was authorised and what was recorded. They can sit in the same company. They are not substitutes, and the public material does not support a ranking.
- 01DisputesWhat was committed, delivered, or failed between agents.
- 02InvestigationsInstructions, policy decisions, outputs and tool actions after an incident.
- 03PaymentsAuthorisation, spend and delivery, via Sui Agent Payments and x402.
Each use still needs the underlying log to be complete. A proof of a partial record is a proof of a partial record.
Uses named in the Mysten Labs announcement.
04
What is verified
Mysten Labs’ own announcement, dated 6 October 2026, states the collaboration, the storage split, Walrus, Sui, and the three application areas including Sui Agent Payments and x402. Evan Cheng is quoted on the need for evidence a counterparty can verify.
The same announcement is explicit that this is an evidence layer aimed at authority and audit. It is not a certificate that every regulatory duty has been met.
05
What remains unclear
When a customer can buy it, at what price, and against which written spec. Reports of an initial enterprise rollout do not name a date. “Announced” is the accurate tense.
How complete a given deployment’s logging is. The proof cannot vouch for events the customer never captured.
06
The catch
Independent verification of a record is not independent verification of the world. The milestone is a serious attempt to connect ordinary enterprise custody of data with a proof someone outside the company can check. Its value will be whether investigators can use the record, and whether it is tied to real authority.
Which chain anchors the proof is the least interesting sentence in the announcement.
WATCH
What builders should watch
- 01A public specification, a date, and terms. Until then it is an announcement.
- 02Whether a payment trail includes instruction and delivery, or only the transfer.
- 03Who can still read the raw telemetry, and who sees only the proof.
BOTTOM LINE
VAA is a way to show what was recorded and that the record held still. It does not make the agent correct, and it does not finish a regulatory file.
Sources
The documents are below. A chart is a reading of those documents, not a recommendation to buy or sell anything.