Four primitives.
One control plane.
govern.sh wraps every agent in verified identity, scoped permissions, human approvals, and a signed audit trail — so your fleet can act at machine speed while your risk team keeps the veto.
Identity that travels with the agent
A passport is more than an API key. It is a verifiable record of who built the agent, what it may touch, and how it has behaved — portable across every tool and every team.
A dedicated Ed25519 keypair per agent, minted in one API call
Portable reputation earned from verified behavior, not claims
One-click revocation that propagates fleet-wide in under a second
Scope every agent to exactly what it needs
Policies compile to a runtime gate — the Policy Enforcement Point — that evaluates every tool call before it executes. Decisions land in single-digit milliseconds, so governance never becomes latency.
Default deny — agents can only do what a policy explicitly grants
Sub-10ms policy decisions on every single action, in-line
Dangerous calls stopped before the API call, not flagged after
Human judgment, only where it counts
Most actions should flow at machine speed. A few should wait for a person. Policies route exactly those few to your team in Slack or email, and spend caps quietly bound everything else.
One-tap approvals in Slack or email, with full action context
Per-agent budgets enforced inside the policy decision itself
Unanswered requests expire to deny — pending never means permitted
Proof, not promises
Every decision — allowed, denied, or held — produces an Ed25519-signed receipt, hash-chained to the one before it. Tamper with one and the whole chain tells on you.
Receipts capture the actor, action, policy verdict, and signature
Hash-chained history that auditors can verify independently
Evidence exports mapped to SOC 2, HIPAA, and PCI requests
One gate on the path between agent and tool
Every call crosses the Policy Enforcement Point. The passport proves who is asking, policy decides what happens, a human steps in when stakes demand it, and a signed receipt records the outcome.
Put a gate on the path to production.
Mint a passport, attach a policy, and watch the first signed receipt land — all inside your first hour. Free for your first three agents.