Sovereign Control

Policy · dual-control · kill switch · L2 investigate. Remediator stays held.

Read-only Agent OS
  • No shell execution
  • No cluster-admin
  • No secret reads
  • No database writes
  • No firewall changes
  • No autonomous remediation

Stage-1 compose

seed / unreachableremediator heldkill switch idle

Stage-1 API unreachable. Policy and approval queues still apply; remediator stays held.

PoliciesApprovals