Trust & product status

Trust starts with
clear boundaries.

What the product is designed to control, what exists today, and what still needs to be proven.

One place owns
the authority.

The workflow control plane owns policies, approvals, execution permissions and audit history. The customer application shows permitted views and submits requests.

A browser, agent, connector or message cannot grant itself more authority.

CUSTOMER APPLICATION

Understand and decide

Present evidence and the human's request.

WORKFLOW CONTROL PLANE

Validate and govern

Check identity, policy, scope and current context.

ISOLATED TOOLS

Act within granted limits

Return receipts and independently checked evidence.

As of September 2026

The honest status.

Implementation status of product capabilities
CapabilityStatusWhat that means
Product walkthroughPreviewAuthored, synthetic examples. No live workflows.
Contracts and kernelFoundationTested contracts, state transitions and filesystem-store foundations.
Identity and policy enforcementIn developmentCedar selected. Server integration and security evidence still required.
Connected engineering workflowsPlannedReal integrations follow fake lifecycle conformance and review.
Hosted / multi-tenant operationsGatedDeployment, isolation, residency and operational reviews precede enablement.

Data stays within agreed limits.

The deployment design begins with an environment assessment. Evidence may only move where the customer's data policy allows it. The first implementation is local-first.

Claims need evidence, too.

This preview makes no certification, production-availability or customer-outcome claims. A completed security review and real pilot evidence are future release gates.

About this preview

Public enquiry collection is disabled. An optional local development form accepts fictional details for testing; its data notice explains storage and deletion. These pages include no third-party analytics or embedded trackers. Hosting access logs may still record technical request data. A public privacy notice and retention policy are required before customer information is collected.