Passport. Envelope. Evidence.
Three primitives, one rule: nothing runs in production without all three. Studio adds them at deploy. Meridian audits them. Auditors verify them.
Cryptographic identity bound to owner, version, scope, and policy. Issued at deploy, not a tag, not a label. Signed by Anchor.
- Ed25519 signed
- Owner attribution
- Scope-locked
- Version-pinned
A versioned bundle of permissions, tool scopes, data residency, retention, and approval rules. Enforced at the runtime boundary on every call.
- Tool-level scopes
- Approval routing
- Residency enforcement
- Retention rules
Every action, read, write, decision, approval, is hashed, signed, and chained. Stream-ready for audit, risk, and compliance systems.
- Per-action signing
- Hash-chained
- Replay-able
- Vendor-portable
The vocabulary your auditors learn first.
Studio drafts. No production access. Local test harness only.
Owner has signed. Awaiting Anchor key issuance and policy review.
Passport issued. Envelope bound. Evidence streaming. Authorized for production.
Owner left, scope drifted, policy violated. Frozen pending re-issuance.
Decommissioned. Evidence archived under retention policy. Signature revoked.
Only Anchor-Certified agents touch production. Auditors and risk reviewers can verify state in seconds, and freeze any agent that drifts.
Evidence belongs in the systems your auditors already use.
Anchor streams signed evidence to your SIEM, GRC, and warehouse. BYOK encryption is available on Pro, your keys, our infrastructure, no decryption material at CPL.