Control

Data Gateway

Demo · green

Govern what the agent may read and disclose — before it sees the data.

A jurisdiction- and policy-aware gateway that governs what an agent may read and disclose before it ever touches the data. Every access is signed and re-verifies offline; the data plane in a Lineage record re-verifies a real data-gateway capsule with the engine absent.

refund-incident-1947.lnrlive
record
refund-incident-1947
root
sha256:54bc0655abbf
planes
approval code conformance data knowledge policy run  (7)
signer
ed25519 · keyid d2f381d7b0b5
  • runstep 9 — refunded an already-delivered orderproven
  • knowledgeretrieved doc-1 — a stale refund-policy docproven
  • policyrefund-limit rule evaluated → allowproven
  • data→causesuspected-cause (uncounted)asserted · uncounted
VERIFIEDoffline · engine absentnet requests: 0

Verified offline. 3 proven planes, 1 asserted and uncounted. 0 network requests.

Every product emits Kernel-shape receipts; one verifier checks them all.