Bring your stack — local Ollama, a hosted OpenAI or Anthropic key, an MCP server, an OpenAPI spec. Governed tool calls pass through one gate you approve, and each governed decision leaves a signed receipt your future self can actually read. Free on the Evaluation.
Governed connector calls — custom API, MCP, OpenAPI, deep-link — resolve to allow, ask, or deny against rules you set. When an agent reaches for something destructive, you see the exact call in plain words — one tap to deny.
Session digest reconstructs what the agent tried, what it did, and what you approved — in a form you can read a week later. No LLM asked, no vendor needed to interpret.
Every decision lands in a local ledger with a rolling evidence chain and configurable redaction. A broken chain is detectable. Nothing transits an Aarmos server. Export as JSONL any time.
Every receipt verifies offline — in a browser at /verify, or with the standalone avar binary. The receipt spec is open, the verifier is open, and the proof does not depend on Aarmos still existing.