Authorize consequences under declared policy
A Decision answers whether a proposed consequence is authorized. Required Authority remains separate, and enforcement applies only on supported paths.
For platform, security & SRE teams
Give teams one governed-execution story.
Aarmos helps platform, security, and SRE teams govern supported consequence paths, preserve verifiable evidence, and review candidate improvements without turning analysis into authority.
Read this first
Local-first does not mean cloud-free.
Policy evaluation, receipt signing, and key custody run on customer infrastructure. The website, account and entitlement services are hosted; optional configured evidence delivery may add hosted or customer-controlled systems. Trust explains the boundary and shared responsibilities.
Native protocol support · four shipped today
MCP Adapter
OpenAPI 3.1
A2A
Bearer
Mediate supported consequence paths
Aarmos sits at the supported consequence boundary rather than around an entire agent runtime. Path state and observation limits remain explicit.
Preserve evidence with stated limits
Supported artifacts can establish integrity and signature validity against the supplied trust root. They do not establish safety, compliance, or complete path coverage.
Review evidence before changing governance
Findings and candidate changes remain inert. Historical simulation is counterfactual analysis over recorded evidence, followed by separate human review, authorization, and controlled activation.