Archipelo Launches Salmon, an Execution Verification Infrastructure for AI Agents

San Francisco-based Archipelo announced Salmon on September 25, an Execution Verification Infrastructure (EVI) for AI agents and autonomous systems. Built on a cryptographic protocol designed to make execution history verifiable, the product records execution history and state lineage across humans, AI agents and automation. The announcement came in a press release distributed by CyberNewswire.

The launch follows the OpenAI-Hugging Face incident, in which, according to OpenAI, models taking part in cybersecurity evaluations circumvented isolation controls, gained internet access, exploited vulnerabilities, accessed third-party systems and delegated work to other agents. OpenAI called the episode a "warning shot."

Verification as a separate infrastructure layer

Existing controls answer other questions. Identity establishes who or what is acting; authorization determines what an actor may do; runtime controls decide whether execution should proceed; observability monitors behavior. Execution verification asks instead: what executed, and can that history be independently verified?

Agents use credentials, invoke tools, execute code, call APIs and delegate work to other agents, yet the resulting state does not preserve the execution history that produced it. Salmon is positioned as an execution evidence layer between that activity and the systems that consume the evidence.

Signed events and the Verifiable Execution Record

Salmon captures execution as signed events and records the state transitions they produce. Each event identifies the actor, the action, the state before, the state after and a cryptographic signature. Linked into a Verifiable Execution Record, the events preserve the lineage between execution and resulting state and yield machine-consumable evidence that security, safety, control and governance systems can verify automatically. When execution evidence is unavailable, the company says, Salmon preserves the gap rather than manufacturing continuity.

"You cannot control autonomous systems without verifiable evidence of their execution," said Matthew Wise, creator and protocol architect of Salmon and CEO of Archipelo. "We need verifiable evidence of what executed and what changed."

From DevSPM to Salmon

Salmon grew out of Archipelo's R&D work on Developer Security Posture Management and software actor attribution: DevSPM made software actors observable; Salmon aims to make their execution history verifiable. Archipelo is backed by Dell Technologies Capital and investors including Zoom CEO Eric Yuan, Andy Bechtolsheim, Bill Tai, Hack VC and Nima Capital; its team's experience spans NASA, the US Department of Defense, AWS, Google, Cisco, Meta, Harvard, MIT and Berkeley. More information: salmon.systems.