Honesty as a feature
What's real today
Capability-level status only — no implementation names, thresholds, or tactical internals. Domain guard status derives from one registry; cross-cutting capabilities listed below.
Shipped badges may include a maturity suffix: customer-ready demo (public Proof Lab path), internally (dogfood only), or shadow/demo (advisory posture by design).
Capability ledger — Last updated: June 19, 2026 — Version: public-ledger-v0.1
By solution domain
Domain status
Early access- Shipped today
- Merchant Refund GuardShipped
- In design
- Payout Destination GuardIn design
- Settlement Exception GuardIn design
- API Key & Webhook GuardIn design
Merchant refund guard is our canonical payments guard; additional payment-ops guards available under engagement.
Domain status
Active- Shipped today
- Workflow Dispatch GuardShipped
- Deployment & Config Change GuardShipped
Workflow dispatch guard is canonical; deployment guard available under engagement.
Domain status
Early access- Shipped today
- Agent Delegation GuardShipped
- Preview
- Fleet Authority SensorsPreview
- In design
- Tool Access Escalation GuardIn design
Authority Stress Matrix is canonical; delegation and fleet sensors available under engagement.
Domain status
Early access- Shipped today
- Authority Stress MatrixShipped
- Preview
- Evidence Bundle ViewPreview
- Decision History ViewPreview
Stress matrix shipped; evidence bundles and decision history in preview.
Derived summary: Payments & fintech (Early access) · Infrastructure & DevOps (Active) · Agentic operations (Early access) · Compliance, audit & insurance (Early access)
Cross-cutting capabilities
Authority checks before execution
Shipped · customer-ready demoHigh-risk actions are evaluated before they run.
Approval-bound execution (operational workflows)
Shipped · customer-ready demoHuman approval is bound to the exact action, single-use, with expiry.
Identity continuity (recognition over time)
Shipped · internallyActors are recognized across sessions — not just at login.
Behavioral risk in shadow mode
Shipped · shadow/demoRisk signals advise before any policy enforces them.
Evidence bundles and authority view
Shipped · customer-ready demoEvery decision leaves a replayable evidence trail.
Authority Stress Matrix (fail-closed stress tests)
Shipped · customer-ready demoUnsafe cases fail closed — revoked authority, reused approvals, and more.
Proof Lab (authority loop demonstrations)
Shipped · customer-ready demoDemonstrable outcomes without exposing internal recipes.
Authority Sensors (fleet view)
PreviewFleet health and drift at a glance — read-only oversight.
Authority Surface Map (from docs, no credentials)
Shipped · internallySend workflow descriptions; receive a control map — no production access.
Onchain (EVM) action guarding
PreviewSame authority pattern for onchain actions — preview status.
Customer-facing operational dashboards
Shipped · internallyPartner cockpit for onboarding, approvals, and evidence replay — Customer Zero dogfood today.
Additional payment-ops workflows (beyond merchant refund)
In designMore money-movement guards in design with design-partner candidates.
Expanded workflow adapters
PlannedBroader coverage across the authority surface — added as design partners come online.
Independent witness hardening
PlannedStrengthening independent internal assurance before any authority expansion.
What we do not publish here
- Internal schema names, policy identifiers, or operator IDs
- Readiness thresholds or gate parameters
- Adversarial test recipes or sandbox mechanics
- Production customer names without permission