Provenance without surveillance
The judgment layerfor AI agents.
Local-first infrastructure that keeps a human in command of the work they delegate to AI, and keeps a signed, verifiable record of how each decision got made.
In active build · invite-only pilot
How it works.
Bounded agents read the delegated work and disagree.
You correct them.
The vault keeps an owned, tamper-evident record of the call.
The weekly agent-spend review.
For the agent-team lead and the operator accountable for what agents did and spent.
setup · baseline · context hardening · agent deliberation · ratified decision · provenance · executive report
One cadence, one signed record, defensible upward.
Open it where it runs
These are the live prototype surfaces, not mockups. Choreography runs on deterministic fixtures; receipts are labeled where earned; vault writes are real and device-local.
prototype · fixtureThe slate & trayThe core mechanic. Drag a thread, a doc, a transcript into the tray. Bounded agents read it, disagree, and stage one next move. You correct the read; the vault keeps the record.open →recorded run · receipts labeledGovernFour registers read the fleet’s model spend against company goals. One refuses out of lane; the operator corrects and ratifies policy.open →prototypeVault + agentsFour registers, one surface each. Every read that seals stays searchable, with the corrections that shaped it.open →What’s real here
Building with design partners now.
A close ring of operators, onboarded one at a time.