Signed, verifiable compliance receipts for every AI agent action — post-quantum signatures, hash-chained audit trails, verifiable without trusting the vendor.