A verifiable authorization checkpoint for consequential AI actions.
IRONGATE is an orchestrator-invoked checkpoint: human-key signatures, evidence-bound checks, deny-by-default evaluation, and an audit trail that outside reviewers can verify. Inline runtime enforcement remains roadmap.
IRONLEDGER proves what happened. IRONGATE checks whether authority exists before an orchestrator proceeds.
Requests a consequential action: publish, send, rotate, anchor, or delete.
Reads real authorization evidence. Missing authority evaluates to DENY.
The orchestrator proceeds only when signed scope and control rules verify.
Real today, roadmap labeled.
Human-key authorization
Ed25519 Bridge signatures over canonical JSON. Single Bridge signer today; multi-party quorum and hardware-token custody are roadmap. Agents see the public key, never the private key.
Evidence-bound checks
Control states resolve from real readers. A caller cannot satisfy a control by passing a string.
Tamper rejection
Changing signed scope breaks the payload hash and signature verification.
Deny-by-default evaluation
Action classes map to required controls. Unknown actions deny by default when routed through the checkpoint.
Unconditional prohibitions
Some actions, such as hard delete, remain denied no matter how many approvals exist.
Unverifiable means unverifiable
Quorum and dissent channels are roadmap until their independent readers exist.
The first public claim publish went through the checkpoint.
Verified production proof point
- Action: PUBLIC_CLAIM_CHANGE
- Authorization: BRIDGE-AUTH-20260531-PUBLIC-CLAIM-PROOF-SURFACE-001
- Signature verifier: ALLOW
- CCP enforce wrapper: ALLOW
- Result: Article 11 proof surface published
Live verification surfaces
What the checkpoint does when tested.
[1] DENY BY DEFAULT decision : DENY missing_gates : ['BRIDGE_AUTH'] [2] ALLOW WITH REAL AUTH signature : valid=True status=ALLOW decision : ALLOW [3] TAMPER -> DENY errors : ['payload_sha256 mismatch', 'signature verification failed: '] [4] HONEST CAPABILITY BOARD QUORUM_2 UNVERIFIABLE TENTH_MAN_CLEAR UNVERIFIABLE NO_DELETE FAILED
Built for teams that need accountable AI action.
IRONGATE is for regulated, enterprise, and public-sector teams deploying orchestrated agents that can publish, send, configure, sign, anchor, or delete. It is designed to support human-oversight and traceability expectations, including NIST AI RMF GOVERN and MANAGE functions. It is an authorization checkpoint and control plane, not a certification.