Skip to content
Trust Model

Autonomy Is Earned. Never Given.

Every organism starts supervised. Authority expands only after demonstrated reliability — and every action along the way is auditable.

Progressive Trust Model

Trust is computed per domain using statistical evidence. Each tier unlocks specific action boundaries. Promotion requires demonstrated competence. Demotion is immediate.

Tier 1: Draft Zero autonomous action. The organism observes, gathers context, and proposes. Every output requires your explicit approval before execution.
Tier 2: Supervised The organism drafts actions and queues them for review. You approve, edit, or reject each one. Corrections are recorded and converted into permanent reflexes.
Tier 3: Trusted Safe, repeatable workflows execute within defined boundaries. The organism escalates on anything outside its proven competence. Immune antibodies block known-bad patterns.
Tier 4: Autonomous Multi-step workflows run independently. The organism handles edge cases within learned parameters and escalates genuinely novel situations. Full action trace for every decision.
Tier 5: Delegated Continuous autonomous operation with real-time monitoring. The organism manages its own planning cycles, defers low-confidence actions, and self-corrects from quality signals.

Trust is domain-scoped. An organism trusted in compliance operations doesn't inherit trust in financial analysis. Every domain earns its own track record independently.

Control Layers

Three layers that work together: runtime enforcement, governance controls, and biological reliability.

Governance Controls

You retain override authority at every trust tier. Autonomy expands — your control never shrinks.

  • Trust demotion is instant; promotion requires sustained evidence
  • Action boundaries persist across model swaps and restarts
  • Sensitivity gating routes high-risk decisions to human review
  • Every tier change is logged with the evidence that triggered it

Biological Reliability

The organism's biology makes reliability a structural property, not a configuration setting.

  • Cortisol response reduces autonomy under pressure automatically
  • Memory consolidation during downtime — no context loss between sessions
  • Allostatic regulation ratchets performance baselines upward, never backward
  • Hebbian wiring strengthens effective patterns and prunes weak ones

Audit & Observability

Every action the organism takes is traced, timed, and attributable.

Action Traces

Every message, decision, and tool call produces a structured trace with timing, model used, trust tier at execution, and the recall context that informed it.

Decision Attribution

When the organism acts, you can see why — which playbook triggered it, what knowledge it recalled, what competence score it had, and whether enforcement flagged anything.

State Persistence

Organism state — trust tiers, immune antibodies, learned reflexes, knowledge graph — persists in structured storage. State is restorable, inspectable, and exportable.

Data Sovereignty

Your keys, your environment

API keys for AI providers live in your environment variables. We never store, transmit, or have access to your provider credentials.

Memory stays on your infrastructure

The organism's knowledge graph, fact store, immune reflexes, and learned state persist on your infrastructure. No training on your data. No cross-tenant sharing.

Provider agnostic

The organism routes to whichever AI provider you configure — Anthropic, OpenAI, Google, local models via Ollama. You choose where your data goes. Switch providers without losing organism state.

Channel isolation

Each connected channel (email, Slack, iMessage) is scoped independently. You control which channels are connected and can revoke access at any time.

Per-domain Bayesian trust scoring
Pre/post enforcement on every response
Structured action traces
Zero-access credential architecture
Instant trust demotion on failure

See the trust model in action.

Start supervised. Earn autonomy. Every step is auditable and reversible.