Contact
Twenty minutes, not a quarter.
Connect your own coding agent, ask it to do something that writes, deny it, verify in your own environment that nothing happened, then read the ledger. Nothing leaves your machine, and there is no platform decision to make.
What happens
Four steps, on your hardware.
You connect your own agent
Claude Code, Codex, Cursor, Copilot — any client that speaks the protocol. It keeps its own credential.
You ask it to write something
Delete a branch, send a mail, change a record. Something you would rather it did not do unsupervised.
You deny it
Then verify, in your own environment, that nothing happened. Refusal means it never executes.
You read the ledger
The decision, the arguments, the rule pinned by digest, and the chain that would break if anyone tidied it.
Ask for the twenty minutes
Who this is for
People who have to put their name on a control: second-line risk, internal audit, the control owner, the engineering leader who owns the agents, and the executive who signs the assurance statement.
Who it is not for, yet
If you need to govern contractors, unmanaged devices or a server-side agent that moves money at three in the morning, a cloud gate reaches places we do not. We would rather say that here than in month two.
Where we are
The SmartHaus Group — Delaware C-corp, New Jersey.