Control plane
Beneath the model.
Above the infrastructure.
Guardrails live inside the model, so a swap or a jailbreak removes them. ALEETH does not. It is a control plane beneath execution: a single seam that every consequential action must pass through before it happens. Deny by default. Allow only what carries authority. Halt, quarantine, or gate anything that does not, in real time, while the act is still preventable.
One governed action
Four steps, and none of them optional.
This is what happens the instant an agent tries to move money, grant access, change production, send data out, or spawn another agent. It happens the same way every time, because the plane is beneath the agent, not beside it.
- 01
Intercept
The agent attempts a consequential action. It reaches the control plane before anything happens, at the seam every call must cross, not a log written after the fact.
- 02
Resolve
The plane resolves who is acting, under what authority and purpose, what the action is, its tool, its arguments, its data class, and on whom or what it acts.
- 03
Decide
Deny by default. Allow only what carries valid authority. Everything else is gated for a human, halted, or quarantined, while the action is still preventable.
- 04
Seal
The decision, allow or deny, is sealed to a signed, tamper-evident receipt before the action completes. There is no action without a record, and no record that can be rewritten.
The verdict
Four decisions. Deny is the default.
Permission is the exception that has to be earned, one action at a time. Control is the resting state.
Allow
The action carries valid authority for this purpose, at this moment. It proceeds, and it leaves a receipt.
Gate
The action needs a human. It is held, routed to the right authority, and does not proceed until a person decides.
Halt
A live agent crossing the line is stopped mid-action. The halt is sealed before the stop completes.
Quarantine
A compromised or drifting agent is isolated. Its attempted steps are captured as forensic records, with no authority to act.
Fail closed
If the seal cannot be written, the call does not return.
Most systems fail open: when governance breaks, the action still goes through and the logging is what is lost. ALEETH inverts that. If the plane cannot evaluate the action or cannot seal the record, the action does not complete. Governance failure is a refusal, never a silent pass.
Containment
A contained agent has no path out.
The plane mediates the network the agent can reach. An agent reaching for the outside reaches a broker it cannot go around: the request either carries a valid, single-use capability or it does not leave. Containment here is a property of the architecture, proven in production. Beneath the Act. Above the Machine. Impossible to Bypass.
Next
The plane decides. The receipt proves it.
Every governed action leaves a signed, tamper-evident receipt, signed three independent ways and verifiable offline in two languages with no call to us. The full seven-layer structure the plane enforces, the thresholds, and the named failure patterns live on the architecture page.