Go live

Go Live

Everything below is off or optional by default, because each one changes behaviour in a way that would break an existing integration if we turned it on for you. Work through them before you depend on the record in front of an auditor.

Turn on signing, then enforce it

The SDK signs at source by default from 3.1 onward, but the server accepts unsigned events so an older client is never locked out. Once every client you run is signing, set VORIM_VERIFY_AUDIT_SIGNATURES so a present-but-invalid signature is rejected rather than stored. Check your own traffic first: enabling it while an old SDK is still emitting will drop those events.

Decide what leaves your process

If your agents handle anything you would not want in an export, turn on no-payload mode and switch your hash fields to keyed commitments. Both are described under Payload Privacy. This is the setting enterprise security review asks about, and it is much easier to enable before you have traffic than after.

Chain your events

Hash chaining is off by default. With it on, deleting a single event from the middle of an agent history becomes detectable rather than invisible, which is most of the value of having a ledger at all.

const vorim = createVorim({
  apiKey: process.env.VORIM_API_KEY,
  chainEvents: true,        // prev_event_hash on every event
  canonicalForm: 'v1',      // signature covers metadata and delegation too
  noPayload: true,          // refuse to transmit content at all
});

Check an export before you need one

Export a bundle and run it through the open-source verifier once, on a normal week, rather than discovering the shape of the output on the day somebody asks for it. The verifier is dependency-free and runs offline, so a counterparty can repeat exactly what you just did.

npx @vorim/verify bundle.json

Sign your webhooks

Set a webhook signing secret before you point a production system at a Vorim webhook. Without one the deliveries carry no signature and your receiver cannot tell our POST from anyone else who has learned the URL.

Book a demo for a walkthrough, or contact us for support. For enterprise needs, reach out at sales@vorim.ai.