Agents propose. People approve.
The governed tier of hosting: four rungs of approval, a vault that signs only what the ladder approved, and a write-once log whose sealed roots make the audit a recomputation.
Taifoon Attest is the governed tier of Taifoon hosting. Agents run in isolated, attested cells and operate a client’s workplace estate through scoped connectors. Every proposed action passes a graduated approval ladder; every approved action is executed only through a signing vault that will not sign what the ladder has not approved; and every step lands in a write-once log whose sealed roots make the record independently verifiable. Agents propose, people approve, and the audit becomes a recomputation rather than an interview.
Observed, never trusted blindly: identity, device management, collaboration, business applications, the HR source, and, where relevant, the operator’s connectivity management.
Read scopes and write scopes separated from day one; tenant credentials held in the vault, never in an agent runtime.
Agent roles in isolated cells, EU region for EU clients, attested images published for enclaved workloads.
Four sensitivity levels. Each record carries blast radius, confidence, reversibility, expiry, approver identity, and an audit identifier. Auto stays off by default in production; enabling it per module is itself a logged decision.
Allowlisted operations, vault-signed, each signature bound to its approval record. No approval, no signature, no write.
The write-once log, sealed roots, scheduled evidence exports, and regulatory evidence packs a third party can recompute.
Off by default in production; enabling it per module is itself a logged decision.
Low blast radius, reversible: a person confirms with one tap, identity recorded.
High consequence: the approver types the confirmation; the record binds who, what, and until when.
The floor that never passes. Some operations are not automatable by policy.
The honest boundary ships with the product: sealing makes records tamper-evident, it does not make decisions correct. The approval ladder is the human-oversight mechanism that covers what the cryptography does not.
Proves what agents did inside an estate. Governed: nothing executes without approval.
Releases payment on what agents provably delivered between parties. The product →
Neither replaces the other, and both inherit the same sealed roots: the evidence plane is the shared floor. On the OS floor, agents run autonomous by design; under Attest, nothing executes without approval. Autonomous there, governed here, never blurred.