Security
What an agent in this system is allowed to do, what stops it doing anything else, and the measurement behind that claim.
The boundary
Architectural, not a matter of policy.
- · No endpoint buys, sells, lists or finances anything. A test reads the API schema and fails if one appears.
- · No tool in the agent registry has side effects, and the Auditor blocks any run where one is registered.
- · The only write in the application stores a document.
- · Queries run on a read-only connection, and are refused before that if they are not plain selects.
- · A memo whose every factual sentence is not cited is withheld, not shown with a caveat.
Red-team results
Loading the last measured run…