Security
The check runs before the action leaves.
If Nexus says no, the action does not happen. That is the security model. A person sits on the path when it matters. The decision is written.
What the platform holds
- The checkBefore a tool call or a write leaves, Nexus decides. Allow, a person, or stop.
- One policyGateway applies the same policy to agents built here and to agents the organization already runs.
- No token passthroughThe token an agent presents is not forwarded to the system behind the check.
- The recordYes and no are written. You can export the actions that never ran.
- Watch, then enforceSee the decision the check would make before a live stop is turned on.
- Your systems stayThe check sits in front. The systems you already run stay where they are.
Current public assurance
Current public assurance is CSA STAR Level 1. Data handling is described in the privacy policy.
Disclosure
Report a vulnerability to security@hardalion.com with enough detail to reproduce it.