Three modes, one default
Each tool is set to auto, approval required, or denied. A capability with no setting is denied, so nothing is allowed by accident.
A tool is one approved action in software you already use: send an email, find a contact, open a task. You decide, for each agent, whether it runs by itself, waits for a person, or is refused.
Each tool is set to auto, approval required, or denied. A capability with no setting is denied, so nothing is allowed by accident.
The platform records every action an agent proposes, including the ones that were refused, in an append-only audit log.
Workflows name what they need, such as sending an SMS, never who provides it. Connect your own accounts and swap a provider without rewriting a workflow.
Connections belong to your organisation and your accounts. A capability with nothing connected fails clearly instead of pretending to succeed.
Example run. Available actions depend on the accounts you connect and the modes you set.
Each action in your software is set to run by itself, wait for approval, or be refused. No setting means refused.
It stands on the 3 layers beneath it.
Every action an agent can take needs a setting from you. With no setting, the answer is no.
Anything you mark as sensitive stops and waits. One press approves it, and the record shows who pressed.
Each action is written to an append-only audit log in the same step as the action itself, refusals included.
Requests from your systems are signed and verified before a workflow starts, and bursts beyond the ceiling are held.
Viewer, operator and owner. People sign in with the Google or Microsoft account they already have.
No model rewrites a price or an invoice amount. Numbers are sent exactly as your system produced them.
Connect one account, set three modes, and see the first run.