Trust & security

Engineered to be trusted

Autonomy is only useful if you can rely on it. The trust isn't a setting — it's built into how the platform runs: capable autonomy you can see, with nothing fabricated and nothing risky without your yes.

Grounded

It doesn't make things up

A seven-layer architecture sits between a tool result and what you read. Hallucinations aren't impossible — they're detectable, and blocked before they reach you.

  • Gathering evidence is separated from writing the answer
  • Cited facts must actually appear in the tool result they cite
  • After every write, the database is re-read by ID to confirm it saved
  • If it says it did something, it proved it really happened
In control

Nothing risky without a yes

One approval queue, three autonomy modes, and a safety floor no mode can cross. You decide how much freedom it has — and it's enforced by rules, not hope.

  • Manual, guided, or autonomous — your choice
  • Restricted and sensitive actions always need a human, even on full autonomy
  • Approvals are scoped by risk: reversible builds flow, external/destructive actions stop
  • The trust profiler recommends a level — it never flips the switch for you
Durable

It finishes the work, and survives crashes

Built like a payments system, not a chatbot. The database is the source of truth — every step is written down before it runs.

  • Atomic claim per task means it never double-runs
  • Heartbeat recovery cleans up crashed runs automatically
  • Resume from the exact step it reached — no lost or repeated work
  • The screen loads from the database; a dropped live stream never corrupts state
Honest connections

It won't fake a broken tool

Your integrations report the truth. A momentary blip won't falsely brick a tool, a genuinely-dead token won't be papered over, and fixes heal on their own.

  • A single failure won't drop a connection — it takes repeated, authoritative refusals
  • A dead-credential signal from the provider flips it instantly
  • Fix a token yourself and the next successful call heals it automatically
Private Mode · Enterprise

Your data stays yours

For data-residency and compliance needs, run on your own database, with your own model keys (or a local model), under your own encryption keys. The platform holds metadata and config — not your content. And it fails closed: it would rather error than write private data to shared storage.

  • Bring your own database (your content never touches shared infra)
  • Bring your own keys, or run a local model
  • Owner-held encryption — the platform can't decrypt your content
  • One canonical switch every surface respects
Talk to us about Private Mode

And it learns from outcomes, never trains on your data — it improves by remembering what worked for you, not by feeding your data into a model.

See it for yourself

Autonomy you can watch

Start a free preview and see the approvals, the step-by-step execution, and the honest status for yourself.