Pre-action trust for consequential AI

Verify authority before AI acts.

Agent Trust Gate™ is a local-first trust enforcement demonstrator designed to verify the exact agent, the exact authority and the exact action before consequential execution or settlement.

Fail closed Exact-action binding One-use GatePass Human authority evidence
Public technical evidenceOpen repository, schemas and deterministic reviewer paths.
Local-first demonstratorNo production credentials, customer data or live settlement.
Human accountableApproval is evidence to verify, not a boolean to trust.
Crypto-agile directionDesigned to evolve without claiming present quantum safety.
The control problem

AI capability is not authority.

An agent may know what to do, have access to a tool and produce a confident answer — yet still lack authority for a specific supplier, amount, account, customer outcome or high-impact action. ATG concentrates on that point-of-action gap.

A

Identity is not standing

A declared software identity is not enough. ATG demonstrates how control of an agent identity, an accountable principal and current delegation can be checked before normal GatePass evaluation.

Open Agent Standing demo →
H

Approval is not authority

An approved: true field does not prove that an authorised person sanctioned the exact action. ATG links human identity, organisational authority and action-specific approval evidence.

Open Human Authority demo →
G

Permission must match the action

GatePass binds proof to one canonical action with freshness and one-use controls. Changed actions, replay, expiry and unresolved proof states are designed to fail closed in the demonstrator.

Review the control model →
Trust architecture

From requester to accountable evidence.

ATG separates several facts that are too often collapsed into a single “allowed” result. Each layer answers a different trust question before the action can proceed.

Layer 01

Standing

Verify the requester has standing to ask for consequential authority.

Layer 02

Authority

Check mandate, scope, amount, counterparty, evidence and required human authority.

Layer 03

GatePass

Bind current proof to one exact action, time window and one-use decision boundary.

Layer 04

Evidence

Keep policy decision evidence separate from what actually executed.

Application routes

Built for actions where mistakes carry consequence.

One trust architecture can be applied to different operating environments. ATG is being explored as a pre-action control pattern, not as a replacement for sector regulation, identity systems, procurement rules or production security infrastructure.

Financial services

High-impact financial actions

Payments, transfers, remediation and other consequential actions where current authority and evidence matter.

Explore route →
Public procurement

Delegated purchasing

Purchase orders, contract variations, goods receipt, invoice approval and payment release.

Explore route →
Retail & supply chain

Operational execution

Replenishment, supplier substitution, shipment rerouting, inventory movement and embedded commerce.

Explore route →
Enterprise agents

Sensitive tool calls

Agentic workflows that need a machine-readable trust boundary before consequential tools are allowed to act.

Explore solutions →
Human-understandable proof

Technical trust should become understandable evidence.

GatePass, Human Authority Proof, Agent Standing and execution evidence are technical structures. The direction is to make those structures capable of producing a simple trust receipt that an accountable person can understand without losing the underlying proof.

  • What exact action was proposed?
  • Which agent requested it and under whose delegation?
  • Which authority and evidence were checked?
  • Which human approved it, when policy required one?
  • Was the action allowed, refused or left unexecuted?
Core principle

No verified standing. No current authority. No exact-action proof. No valid GatePass. No action.

ATG is designed to put the trust decision before the consequential action — then preserve evidence of what the gate decided and what subsequently happened.

Reviewable by design

Evidence before marketing claims.

The public implementation remains deliberately bounded. Reviewers can inspect deterministic scenarios, refusal behaviour, schemas, threat-model material and the claims boundary without being asked to trust a sales deck.

10-minute reviewer path

Run the compact reviewer sequence locally and see outcome-derived pass/refuse behaviour.

npm ci
npm run reviewer

Working demonstrations

Inspect Human Authority and Agent Standing with fixed synthetic scenarios — including refusal cases, expiry and changed-action checks.

Open evidence centre →

Strict claims boundary

No production deployment, payment execution, security certification, customer data, live employee directory or production key custody is claimed.

Inspect public GitHub →
Technical review & design-partner enquiries

Discuss a bounded evaluation.

For serious technical review, integration feasibility or a controlled non-production paid evaluation pilot.

Contact Agent Trust Gate →