Skip to main content

Platform

The runtime underneath the report

Where the investigation runs, what it reads, and where it is required to stop.
The same engine installs into your own cluster or runs on ours, and neither version can pass the approval boundary on its own.

Runtime surfacedeploymentpipeline stagestrust boundary

How it runs

Choose a deployment model without changing the evidence contract.

Self-hosting via HelmBetaReviewed

Read-only by default

Connectors are scoped to read.
Production Master proposes changes; applying one is a separate, human-initiated action.

Runs where your evidence lives

Self-host the runtime via Helm inside your own infrastructure, or use the managed service.
The investigation engine is identical.

No host lock-in

The runtime depends on no specific cloud or execution platform.
Hosting choices sit behind explicit interfaces.

Bring your own model keys

Point the runtime at your own LLM provider credentials, or use ours on the managed plans.

What happens between the alert and the answer

7 stages. The investigation can stop at any of them, and it always stops before production changes. Select a stage to see what it produced in this sample.

Investigation pipeline · checkout-apiPM-SAMPLE-001 · 14:23–14:31 UTC
↑ human approval boundary
Stage 0114:23 UTC

Detect

An alert, a deploy, or a request opens an investigation with an explicit evidence window.

In this sample
checkout-api p99 · 410 ms → 2.9 s
Opens PM-SAMPLE-001 with the window 14:23–14:31 UTC.
detect → gather → exhibit → hypothesise → challenge → report → gate · the run always stops before the gate

Evidence moves only through an agreed path

Five gates, each one named before an evaluation starts — the source, the credential scope, the window, the report audience, and the person who owns the next action.
Anything outside that written agreement stays disconnected.

01
An evidence source you approve
Named per connector, in writing, before anything is connected.
02
A minimum scoped, read-only credential
Read-only is the default posture; scopes are agreed per connector.
03
A bounded investigation window
The sample window is 14:23–14:31 UTC. Outside it, nothing is read.
04
A cited report
Audience agreed in advance, every claim carrying its exhibit.
05
A human approval boundary
Named owner for the next action. No autonomous remediation path.
Shipped
Human approval · read-only connector scopes · self-host via Helm, to closed-beta teams
Not yet published
Encryption and key-management commitments · retention, deletion and residency policy · subprocessor register
Roadmap
Granular RBAC, SSO and provisioning · audit export and SIEM streaming · air-gapped install
this page is a statement of practice, not a certification · no compliance badges

Run it where your evidence already is

The same runtime installs into your own Kubernetes cluster or runs on ours, and the investigation it performs is the same one either way.

Self-host via Helm — available now to closed-beta teams.