The runtime assurance loop, on one AI request

Local runtime controls evaluate every request against your policy and permit, deny, or escalate — before it reaches a customer or a system.

{
  "overt_version": "1.0",
  "timestamp": "2026-04-07T01:14:33.891Z",
  "decision": "PERMIT",
  "policy_hash": "sha256:e8f2a1...",
  "controls_executed": 4,
  "controls_passed": 4,
  "flags": ["authority_limit"],
  "notary": {
    "node": "notary-03-us-west",
    "signature": "ed25519:7c9f3b..."
  },
  "chain_hash": "sha256:a91d4f..."
}

Every decision becomes a signed evidence receipt. Tamper‑evident. Independently verifiable. Customer‑ready when security review asks.

Receipts feed back into policy. Drift becomes a ticket, model swaps become a signed record, and every refinement is itself evidenced.