NOCTRYSArchitecture
The action plane, not the cognition plane.
We don’t try to read the model’s mind (an unsolved problem). We gate its hands. Every consequential action passes through the interceptor, which is fully observable and controllable no matter what happens inside the model.
deterministicfail-closedinline interceptorself-hostedonly 32 bytes leave
Every consequential action passes the interceptor before it runs — inside your boundary.
Deterministic: no model in the enforcement path. Fail-closed: malformed or unknown actions are blocked, never forwarded. Self-hosted: runs in your infrastructure; only a 32-byte hash of the log ever leaves.
Inside the interceptor
| Stage | What runs |
|---|---|
| Policy | allowlist · argument & output schema · spend caps · rate limits · approval · egress · delegation · mandates |
| Behavior | exfiltration · prompt & indirect injection · information-flow control · drift · memory poisoning · tool-drift |
| Identity | Ed25519 SVID · signed A2A messages · Web Bot Auth egress · attestation |
| Recorder | hash-chained ledger · AERE anchor · witness cosign · execution receipts |
Be one of our first five design partners
Free pilot. Two-week, self-hosted integration. You keep the tamper-evident audit and the AI Act compliance report.
Request a pilot →