The Axiom Proof agent roster

"I find what you didn't know you had."

Drishti runs discovery across your systems — initially via interview-driven walkthroughs in Phase 1, then through live read-only connectors (PostgreSQL, MySQL, Google Workspace, M365, S3) in Phase 2. It produces a complete inventory of where personal data lives, how it flows, and where it crosses borders.

"I tell you what kind of data it is."

Vibhaag takes Drishti's output and classifies each field by DPDPA category — name, contact, government ID, financial, health, children's data, biometric, cross-border. Confidence scores are produced; low-confidence fields are routed to a human review queue.

"I measure you against the law."

Parikshan runs the gap assessment against the versioned control library (46 controls in v0.1.0). It scores each control, weights the risk, and produces a posture score and an estimated statutory exposure. It also produces SDF self-assessments.

"I am your witness."

Saakshi seals every piece of supporting evidence — policies, screenshots, configs, attestations — with a content hash and stores it in the WORM-locked evidence vault. Each artifact is linked to the controls it demonstrates.

"I propose the fix. You decide."

Sudhaar converts each finding into a typed, parameterised remediation action with a risk score, blast radius, dependency order, and a mandatory generated rollback plan. Sudhaar holds NO write credentials (ADR-3) — it can propose, never execute.

"I only act on your approval."

Karya is the only mutating agent. It executes ONLY actions covered by a signed, scope-bound approval token validated per action (not per batch). Every step logs pre- and post-state to the evidence vault; the post-execution verification agent confirms the gap actually closed.

"I remember everything, forever."

Lekha writes the immutable, hash-chained audit ledger. Every agent action, every human approval, every state change — recorded in order, with a chain verifiable end-to-end by any independent reviewer. The chain is the product.

"I watch the law so you don't have to."

Nazar monitors MeitY notifications, the Data Protection Board's orders, and the gazette. When a regulatory change is detected, Nazar maps it to affected controls in the library and raises a re-assessment prompt.

"I turn findings into documents."

Prativedan generates Board reports, auditor packs, and DPB-ready submissions. Every claim in a report is traceable to a specific evidence artifact. The founder reviews and signs off before any report reaches a client.

"I find who's about to buy."

Sanket reads public sources (hiring posts, tender notices, regulatory filings) for buying-intent signals relevant to DPDPA. Internal-only — used to fuel the founder's GTM, not a customer-facing product.

"I prove that execution matched your plan and your approval."

Samadhan enforces dual-control maker-checker integrity over Karya executions. It reconciles post-execution reality against approved scope, detects parameter-level drift, sweeps unexecuted actions back to approved status, and cryptographically signs the reconciliation statement with an approval-keyed HMAC.

"I turn findings, ledgers, and evidence into unassailable, auditor-ready proof."

Pramaan is the master synthesis authority for statutory closure. It aggregates findings, remediation tokens, execution batches, Saakshi WORM evidence manifests, and Lekha Merkle root hashes into an authoritative closure pack sealed with the Gold ProofSeal under Founder co-signature.