One computer · one independent witness
GhostLogic Flight Recorder
A tamper-evident witness and recovery point for one computer.
Flight Recorder pairs with one computer, preserves versions of files in its protected locations, and keeps an independent record of the security, system and AI-agent activity that touched them. Windows 10/11 x64 at launch. macOS and Linux support are planned and not included in the launch commitment. Before that record is treated as reliable, GhostLogic uses TICS to assess timestamp continuity, recording gaps, clock changes and evidence-chain integrity.
First production run — expected Q1 2027
Your purchase reserves a unit from the first production run. Cancel any time before shipment for a full refund.
Starting at$299
THE ROLE
Trusted, Caution or Do Not Trust—a clear TICS result, not a vague confidence claim.
TICS Trust Score
One score. Three clear states.
TICS scores telemetry integrity and continuity from 350 to 850 by assessing timestamp continuity, recording gaps, clock changes and evidence-chain integrity.
Stop is not a trust state. On Core and Core Pro, it is the physical control used to halt supported agent actions.
Who it is for
This is not for ordinary AI conversations.
If you only use AI to write emails, summarize documents or generate ideas, your chat history may be enough.
Flight Recorder is for people who allow AI to act on the computer.
- Run commands or code
- Create, modify or delete files
- Operate a browser
- Access business accounts
- Send messages or submit forms
- Use connected tools and applications
- Run unattended automations
Once AI can take action, the prompt is only the instruction. It is not proof of what actually happened afterward.
The gap
AI can apologize. It cannot reconstruct your computer.
When an AI agent makes a mistake—or something impersonates one—you need more than its explanation.
- What action was actually taken
- Which agent, process or user initiated it
- What files, accounts or systems were affected
- Whether the action succeeded
- Whether the available timeline is complete
- Whether the record was interrupted or altered
The obvious replies, answered
Use Git, backups, containers and restricted permissions.
Flight Recorder is not an alternative to any of them. It covers the part they do not.
Just use Git.
You should. Git covers versioned project files. It does not cover every local file, command, credential, browser action, account, automation or network event an agent may touch.
Just use backups.
Also yes. Backups restore data. They do not identify which agent or process caused an incident, whether the timeline has gaps, or whether local logs were altered.
I run agents in containers.
Good practice. Containers reduce exposure, but they do not produce an independent timeline or demonstrate that isolation held.
Recording does not prevent damage.
Correct. Flight Recorder is a witness, not a sandbox or permission system. It cannot stop a harmful action; it protects the record of what happened and the successfully preserved versions of protected files.
My AI keeps a chat history.
Chat history shows what you asked and what the model said. It does not show every command, file operation, tool call or system change that followed.
Does it restore deleted files?
GhostLogic can restore successfully preserved versions of protected files. It cannot restore files that were never selected, captured or fully replicated before loss. Keep backups, Git and snapshots for everything outside the protected selection.
The receipts
Read an actual GhostLogic report.
A real AI-agent session, reconstructed from acquired evidence: the agent’s claims, independent observations, corroborated findings and disclosed limitations — with SHA-256 digests for every exhibit.
Sample report · demonstration evidence · case GL-20260812-001Before you buy
Short answers.
When does it ship?
Preorders are expected to begin shipping in Q1 2027. If an order cannot ship by March 31, 2027, GhostLogic will notify you and offer a revised estimated date or a full refund.
Can one Flight Recorder cover several computers?
No. Each device pairs with one authorized computer. That constraint helps prevent a different machine or substitute recorder from being quietly inserted into the evidence chain.
What happens if I unplug it?
The interruption is detected and recorded. Recording cannot continue while the device is disconnected, and the missing period affects the continuity assessment.
Does GhostLogic upload my activity?
Essential assessment, recording and verification run locally and do not require an internet connection. Encrypted backup and oversight services are optional.
What happens when storage fills up?
Retention depends on capacity and activity level. Storage warnings provide time to export or archive records before capacity is exhausted. Continuity information is not silently discarded.
What it does
Assess before relying
TICS—the Telemetry Integrity and Continuity Score—checks whether the record itself supports trust before GhostLogic treats it as reliable.
Preserve outside the source
The evidence remains outside the computer that produced it, creating an independent record for investigation, insurance or review.
Recover what was preserved
If an agent deletes a protected file or overwrites it with unusable data, an earlier successfully preserved version remains recoverable. Files never selected, captured or fully replicated before loss cannot be restored.
Hardware capabilities
Built to make trust observable.
- ✓Cryptographically pairs with one authorized computer
- ✓Continuously records supported system and security telemetry
- ✓Captures supported AI-agent and automation activity
- ✓Preserves records outside the computer that produced them
- ✓Performs an initial protected capture of selected folders or supported volumes
- ✓Preserves new and modified versions of protected files as they change
- ✓Restores successfully preserved versions after deletion or overwrite
- ✓Replicates preserved versions to approved destinations as each integration is documented and released
- ✓Evaluates timestamp and recording continuity with TICS
- ✓Maintains a tamper-evident, hash-chained activity timeline
- ✓Detects interruption, removal and unauthorized replacement
- ✓Continues recording without an internet connection
- ✓Produces verified exports for investigation, insurance or review
- ✓Connects directly through USB-C
- ✓Uses an illuminated indicator for trust and warning states
- ✓Available in multiple storage capacities
- ✓Requires one Flight Recorder for each protected computer
Flight Recorder hardware
Every state. One independent witness.
The GhostLogic product family
Independent by design
Evidence that does not require belief.
Start with one computer, protect the network, or make GhostLogic the permanent control point for the workstation.