Attest: receipts for your AI agents

Checks what your AI agents say they did against your own Gmail and Calendar tabs. Nothing is sent unless you opt in.

Nothing leaves your browser unless you turn on an option that sends. Attest reads your Gmail and Google Calendar tabs on your computer, keeps what it finds in your browser, and never clicks, types or sends anything on a page. Two options send something, both off until you turn them on: your own Anthropic or OpenAI key, for a second opinion on partial matches, and daily usage numbers with no name or address in them: counts, a random install id, versions and the date, from which totals across all installs are published. Attest checks what your AI agents say they did against your own Gmail and Google Calendar tabs, and keeps a graded receipt for each claim, in your browser. Paste an agent's activity log (Meta Muse, ChatGPT and Dots, Claude) into Attest's side panel. Attest compares each claim with what it saw in your Gmail Sent folder, the receipt emails you open and your Calendar, and grades it: Verified, Partial, Not found, Over scope (outside the grant you set for that agent) or Unverifiable. A send nobody claimed, made while an agent was working or you were away, is marked Unasked, likely agent. Every receipt shows its evidence, alerts tell you when one needs a look, and a weekly digest sums up each agent's week. What Attest cannot do. It sees only tabs you have open: actions inside Messenger, phone calls, purchases without an email receipt and anything on your phone are invisible to it, and those receipts say Unverifiable. "Likely agent" is the strongest claim it makes, since it cannot prove who pressed send. Vendor pages change; when a reader stops matching, Attest marks it degraded and tells you. It does not read your AI agents' own pages, as their makers' terms forbid it, so you paste their logs. Dots requires a Pro tier, so a pasted Dots log is read with ChatGPT's phrases until a real one has been seen. The optional on-device model depends on your Chrome and your computer; without it, Attest grades by its rules alone and says so. Desktop Chrome only. The attacks that still work against it are published with their rates in the project's docs/attacks-that-work.md.