An agent does something it shouldn't. Three weeks later, someone asks "what exactly did it do?" — and the only witness is a log written by the suspect. NoireBox is a hash-chained, Ed25519-signed journal of agent decisions, anchored by third-party RFC 3161 timestamps — one TSA seal covers a whole fleet. Exports are attestations anyone can verify: tamper with the journal and verification explodes. On purpose. MCP server, plugins, API and dashboard included.

pip install noirebox · docker run -p 8768:8768 ghcr.io/noirebox/noirebox

_{The honesty bit: tamper-evidence is not truth-at-write. NoireBox proves records weren't altered — it can't vouch that a record was accurate when sealed. That boundary is written down in the threat model, on purpose.}

Your agent needs a browser. Playwright ships 218 MB of Chromium; Navette is one 626 KB Rust binary driving the WebView your OS already ships — no Chromium, no download, no RAM bonfire. 18 MCP tools: navigate, read, click, type, screenshot — with native input on all three engines and session isolation CI-enforced.

brew install slabbdev/tap/navette · cargo install navette-browser · docker run -i --rm ghcr.io/slabbdev/navette navette mcp

_{Measured, not vibed: BENCHMARKS.md — faster than Playwright + Chromium on every metric measured, reproducible with one command. The walled-web Tollbooth bench (200 URLs × 5 categories) ships in bench/, dataset CC BY 4.0.}