GVNR

Receipts

Every decision leaves a receipt. Not a log line, a record with the fields an audit actually asks for, and a chain that shows if anyone edits it.

What each receipt names

Those are fields, not prose. A report can be built from them without anyone parsing sentences.

Why it is hash-chained

Each record is chained to the one before it. Edit or delete a single entry and the chain visibly breaks. That is the difference between a log, which anyone with write access can quietly revise, and a record you can put in front of someone who has a reason to doubt you.

Observability tools keep logs. Logs are editable. The distinction matters the moment the question stops being "what did it cost" and becomes "prove what happened".

Where it runs

On your machine, with your keys. Nothing is sent to Instruxi, so the receipts are yours and so is the decision about who ever sees them.

How this relates to Enforcer

GVNR asks the same question Enforcer asks everywhere else: is this actor permitted to do this, right now, and who authorised it. GVNR answers it for an agent on your own machine and for what that agent may spend and do. Enforcer answers it inside an application, for users, tenants and API callers, and returns a reason with each decision. They are the same idea at two different layers and neither requires the other.

Powered by Instruxi. Verified against the GVNR source on 15 September 2026. Free and open, runs on your own machine, nothing is sent to Instruxi. Related: GVNR · Stop an agent overspending · Block dangerous commands · Quickstart · Configure · Receipts · How it compares · Live demo · Enforcer. Enforcer, the identity and authorization service, is at enforcer.instruxi.dev.