The Axiom Proof agent roster

"I find what you didn't know you had."

Drishti runs discovery across your systems — initially via interview-driven walkthroughs in Phase 1, then through live read-only connectors (PostgreSQL, MySQL, Google Workspace, M365, S3) in Phase 2. It produces a complete inventory of where personal data lives, how it flows, and where it crosses borders.

"I tell you what kind of data it is."

Vibhaag takes Drishti's output and classifies each field by DPDPA category — name, contact, government ID, financial, health, children's data, biometric, cross-border. Confidence scores are produced; low-confidence fields are routed to a human review queue.

"I measure you against the law."

Parikshan runs the gap assessment against the versioned control library (46 controls in v0.1.1). It scores each control, weights the risk, and produces a posture score and an estimated statutory exposure. It also produces SDF self-assessments.

"I am your witness."

Saakshi seals every piece of supporting evidence — policies, screenshots, configs, attestations — with a content hash and stores it in the WORM-locked evidence vault. Each artifact is linked to the controls it demonstrates.

"I propose the fix. You decide."

Sudhaar converts each finding into a typed, parameterised remediation action with a risk score, blast radius, dependency order, and a mandatory generated rollback plan. Sudhaar holds NO write credentials (ADR-3) — it can propose, never execute.

"I only act on your approval."

Karya is the only mutating agent. It executes ONLY actions covered by a signed, scope-bound approval token validated per action (not per batch). Every step logs pre- and post-state to the evidence vault; the post-execution verification agent confirms the gap actually closed.

"I remember everything, forever."

Lekha writes the immutable, hash-chained audit ledger. Every agent action, every human approval, every state change — recorded in order, with a chain verifiable end-to-end by any independent reviewer. The chain is the product.

"I watch the law so you don't have to."

When government-source feeds are configured and available, Nazar checks MeitY notifications, Data Protection Board orders and the gazette. Detected changes become regulatory signals mapped to affected controls for human review and re-assessment; Nazar cannot modify the control library. If a feed is unavailable, no live-watch coverage is claimed.

"I turn findings into documents."

Prativedan generates Board reports, auditor packs, and DPB-ready submissions. Every claim in a report is traceable to a specific evidence artifact. The founder reviews and signs off before any report reaches a client.

"I find who's about to buy."

Sanket reads public sources (hiring posts, tender notices, regulatory filings) for buying-intent signals relevant to DPDPA. Internal-only — used to fuel the founder's GTM, not a customer-facing product.

"I prove that execution matched your plan and your approval."

Samadhan enforces dual-control maker-checker integrity over Karya executions. It reconciles post-execution reality against approved scope, detects parameter-level drift, sweeps unexecuted actions back to approved status, and cryptographically signs the reconciliation statement with an approval-keyed HMAC.

"I bring verified findings, evidence and audit history into an authenticated closure dossier."

Pramaan brings findings, approved remediation, reconciled execution, Saakshi’s sealed evidence and Lekha’s audit records into a final closure dossier. After verification and the required human review, the dossier carries the Gold ProofSeal and an Axiom Minds Private Limited co-signature by an authorised Founder. Missing evidence or unresolved checks block closure. The seal authenticates the recorded proof and sign-offs within the stated scope; it is not regulatory certification or a guarantee of legal compliance.