Stop letting models touch reality.
ProofGate is the standard for deterministic consequences in AI systems. It defines how to gate actions (email, money, files, access) with explicit policy, signed approvals, signed receipts, and append-only audit truth — before any tool call mutates the world.
If your agent can do things, it will do the wrong thing — eventually.
Most “agent security” is vibes. Production failures follow the same pattern: untrusted input → model output → over-scoped tools → irreversible action. ProofGate fixes the architecture, not the model.
Prompt Injection
Untrusted content becomes instructions. If tools are reachable, consequences happen.
Over-scoped Permissions
Admin-ish tool scopes turn a helper into an attacker — even without malice.
No Receipts
When something goes wrong, you lose causality: who approved what, when, and why.
Input → Model → Tools → Reality
Untrusted input becomes actions. Authority is implicit. Incidents are inevitable.
Input → Model (proposal) → ProofGate → Tools → Reality
Actions happen only when invariants allow them. Approvals and receipts are signed. Audit is append-only.
Seven non-negotiables for AI that touches production.
ProofGate defines minimum requirements for deterministic consequence rails. If any of these are missing, you don’t have guarantees — you have hope.
Intent Envelopes
Every action is a structured intent — not a prompt. Intents are validated before execution.
Explicit Invariants
Allowlists, caps, deny rules, rate limits. Machine-enforced. No hidden authority.
No Secrets in Models
Models never hold raw credentials. Tools live behind a router with least privilege.
Signed Approvals
Signed, expiring, intent-hash bound. No forgery. No replay. No ambiguity.
Signed Receipts
Every decision + execution emits cryptographic receipts. Proof of causality by default.
Append-only Audit Truth
Immutable JSONL audit lines. Incidents become forensics — not blame games.
- “Users can correct it.”
- “We monitor it.”
- “The model is improving.”
Adopt ProofGate without replatforming.
ProofGate is a boundary layer. Wrap outputs as intents, evaluate against invariant packs, execute only through a router, and persist receipts + audit logs.
Convert model output into an Intent Envelope (structured action request).
Evaluate against invariant packs. Deny, require approval, or execute.
Emit signed receipts + append-only audit. Incidents become forensics.