Bring your stack — local Ollama, a hosted OpenAI key, an MCP server, an OpenAPI spec. Governed tool calls on supported paths pass through the policy gate, and each governed decision leaves a signed receipt your future self can read. Evaluation access requires approval and starts a 30-day period, currently at no charge.
Governed connector calls — custom API, MCP, OpenAPI, deep-link — resolve to allow, deny, step_up, or defer against rules you set. When an agent reaches for something destructive, you see the exact call in plain words — one tap to deny.
Session digest reconstructs what the agent tried, what it did, and what you approved — in a form you can read a week later. No LLM asked, no vendor needed to interpret.
Decisions on supported governed paths land in a local ledger with a rolling evidence chain and configurable redaction. A broken chain is detectable. Policy evaluation, receipt signing, and key custody do not require an Aarmos-hosted service. Export as JSONL any time.
Receipts verify offline — in a browser at /verify, or with the portable Apache-2.0 verifier library on npm, and the proof does not depend on Aarmos still existing.