01 · Policy Engine
The core
The brain that decides.
Declarative rule evaluation in microseconds.
Spend limits, whitelists, time windows, role separation, risk scoring, custom policies — all expressed in a typed DSL, version-controlled in Git, evaluated before any signing request is emitted.
-
{ }
Typed policy DSL
policy-dsl v2 · git-versioned · code-review friendly
-
⏱
Sub-millisecond p99
parallel evaluation · cached compilation
-
↻
Hot-reloadable
no restart · per-agent scoped · audit-tracked
02 · Audit Trail
Evidence
Immutable.
Searchable.
Defensible by design.
Every evaluation captured — agent ID, prompt hash, model version, tool params, context, decision, reviewer. Stored in S3 with a Merkle root anchored on-chain.
-
⛓
Merkle-anchored
tamper-evident · on-chain proof
-
📑
SOC 2 / ISO 27001 / SOX
structured exports · auditor-ready
03 · Approval
Humans,
when needed.
Threshold-triggered human review. Slack, email, and approval-UI integration with SLA tracking and configurable escalation paths.
- Slack
- Email
- Webhook
- SLA tracking
- Multi-step
04 · Compliance
Screened
at the edge.
OFAC and EU sanctioned-address lists, Chainalysis-style risk scores, Travel Rule for cross-jurisdiction transfers, automatic AML evidence.
- Chainalysis
- TRM Labs
- OFAC
- Travel Rule
05 · Multi-Agent
Many agents,
one ledger.
Independent budget pools per agent. Cross-agent message bus for task handoff. Single-agent kill switch — without affecting others.
- Per-agent budgets
- Inter-agent bus
- Kill-switch
- Dashboard
06 · ERP Integration
Last mile
From chain
to ledger.
So spent crypto looks like finance-issued money.
SAP, Oracle, NetSuite, Xero, QuickBooks adapters out of the box. GAAP / IFRS classification. Automated journal entries. Tax-ready exports for AML and cross-border filings.
-
⊞
SAP · Oracle · NetSuite · Xero · QuickBooks
official adapters · field-mapped · idempotent
-
📊
GAAP / IFRS classification
COGS · OpEx · CapEx · auto-classified
07 · Error Recovery
Safety net
Time, before
commitment.
A revocation window is the only honest defense against hallucination.
Delayed execution pools (T+0 / T+1 / T+N). Revocation windows for high-stakes transactions. Prompt-injection detection. Circuit breakers that suspend agents on anomaly — automatically, surgically.
-
⏳
Delayed execution pools
T+0 · T+1 · T+N · configurable per policy
-
⊘
Circuit breakers
anomaly detection · per-agent isolation