/ GOVERNANCE

Re: AI governance built in

Hello,

Give agents a whole computer, and keep the real world behind one gateway. Every call to GitHub, Slack, Stripe or any connected app goes through it.

CREDENTIALS STAY OUT OF THE VM

• Model keys and app credentials stay on our servers, encrypted at rest.
• Agents get a short-lived session token, never your keys.
• Git access covers one repository and expires within an hour.

POLICY ON EVERY TOOL CALL

• Set each tool to allow, ask or deny, per connection, with wildcard rules.
• By default, reads run. Sends, deletes and deploys wait for a person.
• Approve, edit the arguments, allow for the session, always allow, or deny.
• Limit each automation to its own tools, rules and connected account.

A RECORD OF WHAT HAPPENED

• Every tool call is recorded: who asked, whose account it used, which rule decided, who approved, and what ran.
• Model usage is tracked per person, session, space and repository.
• The usage page shows spend, agent time, AI by model and top sessions.

ADMIN CONTROLS

• Roles for owners, admins, members and guests. Guests see only what they are added to.
• Choose who pays for AI, which machine sizes members can use, and who can connect apps.
• Public links to published pages stay off until an admin turns them on.

— Leverage Computer

next: git under everything →