The model
Seven moves, one proof
Governing an AI agent comes down to seven things you must be able to do — and prove. ByteVerity ships a product for each. They interlock because they all speak the same signed receipt — so this is one platform, not a pile of tools.
One platform, not a pile of tools
The seven verbs
Identify
Bind every action to a short-lived, revocable identity — minted in-platform or carried from your own IdP (Okta ID-JAG, SPIFFE/SPIRE).
Identity
Control
Govern what the agent may read and disclose — before it ever sees the data.
Data Gateway · Cleanroom · Browser Runtime
Govern
Allow or deny an action against policy — and seal the decision into a receipt; an engineering lead's signed code-change policy is enforced in CI.
Control + the governor family
Locate
Pinpoint the exact step — or the exact poisoned knowledge write — behind a bad outcome.
Bisect
Prove
Re-derive what happened across every plane — offline, tamper-evident.
Lineage
Revoke
Cut off a bad agent; its next action fails closed.
Capability Gateway
Posture
Query the whole evidence corpus — what agents knew, did, disclosed — and see the fleet.
Atlas
⎯⎯ ByteVerity Kernel — the shared proof substrate
One receipt format · one offline verifier.
Every product emits Kernel-shape receipts; one verifier checks them all. Adopt one product, then the next — the proof carries over, so you never re-buy trust.
Products
Nine products, one receipt
Each product delivers one of the moves. They share a single receipt format and a single offline verifier — so the proof carries across every one.
Prove
Demo · greenLineage
One record. Seven planes. Anyone can re-check it.
Open→Locate
Demo · greenBisect
Land on the exact step that went wrong.
Open→Control
Demo · greenData Gateway
Govern what the agent may read and disclose — before it sees the data.
Open→Control
Demo · greenCleanroom
Lock the secret; the agent on disk sees only a stub.
Open→Posture
Demo · greenAtlas
Query the whole evidence corpus — see the fleet.
Open→Identify
Demo · greenIdentity
Non-human identity, finally held to account.
Open→Revoke
Demo · greenCapability Gateway
Cut off a bad agent; its next action fails closed.
Open→Control
Demo · greenBrowser Runtime
Govern what an agent does on the open web.
Open→Govern
ShippedKernel
One receipt format. One offline verifier.
Open→