Allow
Within mandate, within budget, within scope. It proceeds — and is signed and recorded anyway.
How it works
Four outcomes, not two.
Every call returns one of four. The fourth is the one most systems lack: not yet, and here is what would change that.
Deny
It stops, with a reason code an operator can debug from — not a 403 and a shrug.
Escalate
A named human signs, with their own key. Non-repudiable, and the agent waits.
Challenge
Not yet — and here is what would change that. The agent steps up and retries, in one call.
The four pillars
Passport
An Ed25519 keypair and a short-lived, offline-verifiable did:key passport. Proof-of-possession — we never see the private key, so we cannot impersonate your agent and neither can anyone who breaches us.
Keyring
Scoped, signed, revocable access to connected systems — GitHub, Stripe, MCP servers — clamped three ways: grant ⊆ role ⊆ tenant guardrail.
Meter
Inference and execution budgets enforced at credential issuance. Over budget means no passport refresh, so an agent is cut off without us sitting on the inference path.
Wallet
Signed mandates with hard caps, and Ed25519-signed, non-repudiable human approval for high-stakes spend.
Evidence
It decides. It does not retain.
Every decision emits a signed loss-event/v2 to an evidence store and is forgotten here. An auth service that also keeps the history has grown an audit product inside it, and the two will drift.
The pump is never on the authorization path: bounded queue → disk spool → retry. A slow sink never slows a decision.
{
"schema_version": "loss-event/v2",
"decision": "allow",
"agent_did": "did:key:z6Mk…4Rn",
"amount": "9000.00",
"approved_by": {
"did": "did:key:z6Mk…9Qa",
"email": "[email protected]",
"signature": "ed25519:…"
},
"witness": "self"
}
// canonical JSON · sorted keys · floats refused
// three implementations, one vector, checked in CIDesign partners
Bring one agent.
Design partners get the gate, the signed evidence and a direct line to the people building it. One field — we will not make you fill in a form to find out what this costs.
Request access
One email. Leave in one click. We never sell it.