Product The Operator
// The autopilot

The AI that runs your AI.

Sense, decide, act, prove, learn — autonomously, within mandates you set, every move reversible and overseen. The operator runs your AI by exception so your team supervises instead of firefighting; each move is written to a record your auditor can check without us.

The operator runs live and proves every move today. Observe and Suggest are available now; assisted and autonomous tiers roll out per tenant as you grant them.

Book a demo Verify a move →
Sense latency · cost · error Decide within your mandate Act route · budget · guard Prove anchored receipt Learn from verified outcomes THE OPERATOR one accountable loop
1SenseLatency, cost, error, and incidents on every dispatch — the operator's eyes.
2DecidePick the move that hits your quality bar for less — never below it.
3ActRoute, budget, and guard inline on the gateway — within your mandate.
4ProveWrite a hash-chained, anchored receipt before the move counts.
5LearnShift toward what your own verified outcomes show works — and prove why.
// What it is

Stop configuring AI. Start supervising it.

Instead of wiring a dozen tools and assigning a team to run them by hand, one operator runs the lot — inside the bounds you set — and proves every move. Hand-tuned config is stale the day it ships; the operator gets cheaper and safer every week from your own verified results, and fixes a cost spike in two minutes, not two weeks — before your team would have seen it.

// You decide how much it runs

Autonomy you dial up — per domain, reversible in one click

The operator starts by watching and suggesting. You grant it more only where you're ready, domain by domain. Autonomy without ceding control.

watchrun on its own
01 Observe It senses every dispatch and surfaces what it would change. Read-only. Available now
02 Suggest It proposes the move — the routing shift, the budget cap — and you apply it in one click. Available now
03 Assisted It acts on low-risk moves and routes anything outside the mandate to a human for approval. Per tenant
04 Supervised It runs in-mandate on its own; you review the receipt trail and intervene by exception. Per tenant
05 Autonomous It runs the domain end-to-end within bounds — every move reversible, every move on the record. Per tenant

The operator runs live and proves every move at every tier. Observe and Suggest are on today; assisted, supervised, and autonomous roll out per tenant as you grant them — never on by default.

// The safety envelope

Autonomy a CISO can actually allow

The operator only acts inside four constraints — the reason its autonomy is something your security team can sign off, not fear.

BoundedIt acts only within the mandates you set — per domain, per scope. Outside the bound, it asks.
ReversibleEvery move can be rolled back in one click — routing weights, budgets, prompt pins, all of it.
ReceiptedIt can't act without writing a chained, anchored receipt you verify without us. No silent moves.
Kill switchYou hold the stop. Pause a domain or the whole operator instantly — control never leaves your hands.
// Every autonomous decision, verifiable

Every other tool asserts ROI. We prove it on a record you can't edit.

This is a real receipt the operator wrote for a move — hash-chained to the one before it, folded into a Merkle batch, anchored on a public chain. Recompute the leaf in your browser. The bytes match, or the chain is broken.

The receipt the operator sealed for this move

As the move leaves the gateway, the canonical receipt is SHA-256 hashed into a leaf, linked to the previous receipt by prev_hash, and folded into the next Merkle batch — then the batch root is anchored on a public chain. Tamper a byte and the recompute breaks.

This is the same client-side verification shipped on the Trust portal. SHA-256 runs via Web Crypto. No Agentics call.

Open the public anchor ↗

// Verify in your browser Anchored
receipt_idc4d8e2f0…4e5f
prev_hash1af67611…4a032
payload_hash2962f6b5…466dd
recomputed—
merkle_root14a24583…c058a
anchor_txblock 420669398 ↗
  • •Recompute leaf
  • •Chain integrity
  • •Fold Merkle proof
  • •Anchor memo == root

SHA-256 runs in your browser via Web Crypto. No Agentics call.

// Hand the operating to an autopilot you can prove

Put an operator in front of your AI — and verify its every move.

Watch it run, dial up only where you're ready, and check a real receipt yourself — no account, no us in the trust chain.

Book a demo Verify a move → See the whole platform →