Control
Browser Runtime
Demo · greenGovern what an agent does on the open web.
A governed browsing runtime: what the agent reads and discloses on the open web is policed at the boundary and sealed into receipts — the same proof substrate as everything else.
- record
- refund-incident-1947
- root
- sha256:54bc0655abbf…
- planes
- approval code conformance data knowledge policy run (7)
- signer
- ed25519 · keyid d2f381d7b0b5…
- runstep 9 — refunded an already-delivered orderproven
- knowledgeretrieved doc-1 — a stale refund-policy docproven
- policyrefund-limit rule evaluated → allowproven
- data→causesuspected-cause (uncounted)asserted · uncounted
Verified offline. 3 proven planes, 1 asserted and uncounted. 0 network requests.
Every product emits Kernel-shape receipts; one verifier checks them all.
The rest of the platform
Same receipt. Same verifier.
Prove
Lineage
One record. Seven planes. Anyone can re-check it.
Open→Locate
Bisect
Land on the exact step that went wrong.
Open→Control
Data Gateway
Govern what the agent may read and disclose — before it sees the data.
Open→Control
Cleanroom
Lock the secret; the agent on disk sees only a stub.
Open→Posture
Atlas
Query the whole evidence corpus — see the fleet.
Open→Identify
Identity
Non-human identity, finally held to account.
Open→Revoke
Capability Gateway
Cut off a bad agent; its next action fails closed.
Open→Govern
Kernel
One receipt format. One offline verifier.
Open→