Runtime assurance for AI systems

AI inference is the new endpoint.
We defend it.

GLACIS sits inline at the inference boundary. We enforce what runs, block what shouldn’t, and emit signed proof your auditors, customers, and insurers can verify themselves.

30-day sprint OVERT-format receipts Zero-egress option
Backed by & running with

The defense layer

One control plane. Three guarantees.

A runtime arbiter that sits inline in your AI request path. Observes every action. Enforces every boundary. Signs proof of both.

See

Every inference. Every tool call. Every decision.

Causal chains across models, agents, and tools — not log dumps. Tamper-evident at the event level.

events / day2.4M
causal chainswitnessed
retentiontamper-evident

Control

Block what shouldn’t run. Allow what should.

Inline at the inference boundary. Deterministic, policy-driven, model-agnostic. No retraining, no swap.

actionpayments.transfer
policy hitclaims/v3
outcomedenied · receipted

Prove

Signed. Witnessed. Portable.

Every decision becomes an OVERT receipt, countersigned by an independent witness. Verifiable without a GLACIS account.

formatOVERT · open spec
witness2-of-3 signed
replaydeterministic

Receipt chain

What an auditable AI decision looks like.

Every action becomes a receipt. Hash-chained to the previous. Countersigned by an independent witness. Tamper one, the chain breaks — and the verifier shows where.

Customer trust boundary Agent tool call Arbiter policy · enforce arbiter-01.us-east Allowed action proceeds Blocked denied · receipted Receipt n−1 1d9a… Receipt n 4f2c…a081 Witness independent · 2-of-3 Verifier anyone, any time hash← runtime · inside customer trust portable proof · independently verifiable

Tamper a receipt · chain breaks · verifier names the gap

What the buyer asks for

The audit perimeter is moving.

Insurers are starting to ask. Regulators are starting to require. Customers are starting to demand. The artifact they all want is the same one — and until OVERT, it didn’t exist as something portable enough to send.

  • InsuranceE&O carriers are carving out autonomous-agent action. The carve-out closes when you can hand them runtime evidence.
  • RegulationEU AI Act post-deployment monitoring and Colorado AI Act consequential-decision logging both require what a receipt is.
  • ProcurementEnterprise AI vendor reviews now ask for runtime audit artifacts a third party can verify — not a SOC 2 report.

Where GLACIS fits

Not a governance tool. Not an eval suite. Not another log.

Adjacent categories solve adjacent problems. GLACIS is the only layer that stops an AI action in flight and produces proof a regulator, customer, or insurer can verify themselves.

Runtime enforcement Signed evidence Portable proof
Governance platforms
OneTrust · Credo · etc.
— policy only — PDF reports — vendor-locked
Model evals
Patronus · Galileo · etc.
— pre-prod only — eval scores — vendor-locked
LLM observability
LangSmith · Helicone · etc.
— log only — unsigned — vendor-locked
GLACIS ✓ inline arbiter ✓ OVERT receipts ✓ independent witness

Install the layer serious companies put under their AI.

A 30-day sprint. One high-risk AI workflow. Live arbiter, signed receipts, and an evidence pack the regulator, customer, or insurer can verify themselves — by the end.