Runtime assurance for AI systems
AI everyone can stand behind.
A receipt for every governed action — one your board, your customers, and your regulator can check without trusting us.
Why runtime
Move fast and prove things.
Accountability that slows you down is a tax, not accountability. Evidence is made in exactly one place — the moment a governed action runs — so Glacis stands in the request path at that moment, with three jobs.
See
Which controls ran. Which didn’t.
Fleet-wide coverage and drift — not event volume.
Control
Block what shouldn’t run. Allow what should.
Inline at the inference boundary. Deterministic, policy-driven, model-agnostic. No retraining, no swap.
Prove
Signed. Witnessed. Portable.
Every governed action becomes an OVERT receipt. Portal minting adds an independent witness countersignature. Verifiable without a Glacis account.
Verification vs validation
Two questions. Your monitoring answers one.
Verification: did it work? Validation: did it stay inside your rules? Most enterprises instrument only the first.
Where GLACIS fits
Glacis is the evidence layer under the AI you already run.
Each category below is good at its job. None was built to sit in the AI request path, stop an action that breaks a stated rule, and hand a counterparty evidence they can check without trusting the system that produced it.
| Runtime enforcement | Signed evidence | Portable proof | |
|---|---|---|---|
| Governance platforms OneTrust · Credo · etc. |
— policy only | — PDF reports | — vendor-locked |
| Model evals Patronus · Galileo · etc. |
— scores, not gates | — eval scores | — vendor-locked |
| LLM observability LangSmith · Helicone · etc. |
— traces, not gates | — unsigned traces | — vendor-locked |
| Platform telemetry & posture Microsoft Purview · Grafana + OpenTelemetry · DSPM |
— at the data layer | — audit logs, unsigned | — tenant-bound |
| GLACIS | ✓ inline arbiter | ✓ OVERT receipts | ✓ verifiable by anyone |
Glacis sits inline at the inference boundary and signs a record of which control ran on a governed action and what it decided — evidence a control ran, not a certificate the system is safe, correct, or compliant. Receipts minted through the portal are countersigned by an independent witness and carry an inclusion proof; SDK receipts are operator‑signed only.
Receipt chain
What an auditable AI decision looks like.
Every governed action mints a hash-chained receipt. Portal-minted receipts add an independent witness. Tamper one — the verifier shows where.
Simulated for illustration
The buyer, the carrier, the regulator
The same question, on three letterheads.
Sooner or later, someone outside your company asks what your AI actually did — an insurer at renewal, a customer in security review, a regulator with a question. That conversation goes better when the answer already exists, rather than being assembled under pressure. OVERT turns it into a single portable artifact you can hand over: the evidence pack.
- InsuranceE&O carriers are carving out autonomous-agent action. The renewal conversation increasingly turns on runtime evidence.
- RegulationThe EU AI Act and Colorado’s automated-decision rules are converging on the runtime receipt: the disclosable record of a consequential decision.
- ProcurementAI security questionnaires have begun asking for third-party-verifiable runtime audit artifacts. Deals move faster when you can hand one over.
Verify it yourself
Don’t take the receipt on trust. Check it.
The receipt below came out of a real run. Check it here and you have done exactly what an auditor, a customer, or an insurer would do — no account, nothing sent anywhere, nothing taken on our word.
Glacis is the steward of OVERT.
Observable Verification Evidence for Runtime Trust: evidence independent parties can verify without protected‑content egress. Every receipt on this site carries it.
Someone will ask. You’ll already have the answer.
A procurement questionnaire. A renewal. A board asking about the AI. Each goes better when the evidence already exists: a runtime receipt for every governed action, an evidence pack the regulator, customer, or insurer can verify themselves. Live in weeks, on a plan that starts free — and there’s a real receipt on this page you can check right now.

