Product · Policy enforcement

Deterministic policy, decided before the action runs.

Explicit constraints applied before execution — permissions, policies, paths, hosts, budgets. The operator baseline is intersected with what a plugin’s author declared, and the operator can only ever narrow. Not to make agents less autonomous. To make autonomy trustworthy.

Govern → Enforce → Prove

Shipping · execution control

01

Govern

Rules as data over tools, capabilities, paths, hosts, commands and budgets, each effect with a because; packs can be signed, and their version must rise.
02

Enforce

ALLOW · ASK · DENY, strongest match wins, every match in the trace. Shadow mode seals every verdict and lets every call proceed until you are ready to block.
03

Prove

The clause that decided each call is sealed with it, so any decision can be traced back to the rule — and the rule to the policy it came from.

No model in the enforcement path. Nothing here rewrites arguments or sandboxes code, and it says so.

Live fleet steering →AI compliance & audit readiness →Run it in the playground →