NiyamAI - An Intent-Bound AI Agent with Cryptographically Verifiable Guardrails using Zero-Knowledge Proofs
Ranking
Observed public metrics from 1 member.
Merged summary
TL;DR - Niyam-AI is a guardrail framework for autonomous LLM agents that locks permitted tools/constraints into a SHA-256-committed "Intent Contract" and gates every tool call behind an isolated Judge model whose verdict is attested by a zk-SNARK proof. It matters because it shifts agent safety from unverifiable in-process checks to cryptographically verifiable enforcement that third parties can audit without seeing model weights.
- Architecture: session-start Intent Contract (SHA-256 commitment) + interception of every tool call, validated by an isolated Judge model; zk-SNARK proof generated via EZKL, and the tool executes only after proof verification.
- Results on 2,000 Agent-SafetyBench scenarios (5-fold stratified CV): F1 88.5%, 1.1% false-positive rate, bootstrap 95% CI [85.19%, 91.88%] (N=1000).
- McNemar's exact paired tests favor Niyam-AI over NeMo Guardrails (390 wins vs 20), Llama Prompt Guard 2 (115 vs 13), and GPT-OSS-Safeguard (384 vs 19), all p < 0.0001.
- Cost: ~2260.6 ± 218.4 ms proof generation per approved action vs ~53.1 ± 11.8 ms verification; authors caveat that their classifier is adapted to Agent-SafetyBench while baselines are zero-shot (Section IV.C).
Sources (1)
NiyamAI - An Intent-Bound AI Agent with Cryptographically Verifiable Guardrails using Zero-Knowledge Proofs
TL;DR - Niyam-AI is a guardrail framework for autonomous LLM agents that locks permitted tools/constraints into a SHA-256-committed "Intent Contract" and gates every tool call behind an isolated Judge model whose verdict is attested by a zk-SNARK proof. It matters because it shifts agent safety from unverifiable in-process checks to cryptographically verifiable enforcement that third parties can audit without seeing model weights.
- Architecture: session-start Intent Contract (SHA-256 commitment) + interception of every tool call, validated by an isolated Judge model; zk-SNARK proof generated via EZKL, and the tool executes only after proof verification.
- Results on 2,000 Agent-SafetyBench scenarios (5-fold stratified CV): F1 88.5%, 1.1% false-positive rate, bootstrap 95% CI [85.19%, 91.88%] (N=1000).
- McNemar's exact paired tests favor Niyam-AI over NeMo Guardrails (390 wins vs 20), Llama Prompt Guard 2 (115 vs 13), and GPT-OSS-Safeguard (384 vs 19), all p < 0.0001.
- Cost: ~2260.6 ± 218.4 ms proof generation per approved action vs ~53.1 ± 11.8 ms verification; authors caveat that their classifier is adapted to Agent-SafetyBench while baselines are zero-shot (Section IV.C).