Risk teams don't block agents because they hate automation. They block them because nobody could answer 'who approved this?' Here's the workflow that changed the answer.

Dana Whitfield7 min read

EngineeringMay 12, 2026

Inside the Policy Enforcement Point: sub-10ms decisions at the gate

How we built a policy engine that sits in the hot path of every agent action and keeps the median decision at 8.4 milliseconds — compilation, caching, and the discipline of a deny-safe fallback.

Jonas Reinholt9 min read

ArchitectureApril 16, 2026

Hash-chained receipts: audit logs your auditor can verify

Traditional audit logs ask your auditor to trust your database. Signed, hash-chained receipts let anyone verify — independently, offline — that the record is complete and untampered.

Priya Natarajan8 min read

Start here

Guides for shipping to production

All guides

Quickstart01

Mint your first Agent Passport

Go from zero to a verified agent making policy-checked calls in about ten minutes — mint a passport, attach a starter policy, and read your first signed receipt.

10 minBeginner

Best practices02

Designing policies that scale

Policy sprawl is how good governance dies. The patterns that keep a 200-agent fleet reviewable: layered policies, scoped verbs, budget hierarchies, and holds that stay rare.

18 minIntermediate

Compliance03

Preparing agent audit evidence for SOC 2

How to walk into a SOC 2 audit with agent activity as your strongest evidence, not your awkward exception — control mapping, receipt exports, and independent verification.

15 minAdvanced

Read enough. Mint a passport.

The quickstart takes ten minutes and the first three agents are free — see the receipts for yourself.

Mint your first passport Talk to us

Everything you need toship agents you can trust

Blog

Guides

Changelog

Security & trust

Engineering notes and perspectives

The approval workflow that finally got risk teams to say yes