GLACIS Managed · Per-tenant arbiter
GLACIS Managed is a signing arbiter we run for your tenant alone. Point your agents at it over a private WAN — one command, never the public internet. Every AI operation returns a signed receipt that verifies live in your browser.
Per-tenant isolation · Private WAN by default · Ed25519 receipts — verify one yourself
✓ VERIFIED
Simulated for illustration · the verification is real — check a signed receipt yourself below, in your browser; nothing is sent anywhere.
Observability sees. GRC documents. Guardrails filter. Platform logs are the platform's word. Glacis proves.
The demo
The whole loop fits in one breath. The same four beats run live on every sales call.
The connector brings up a WireGuard tunnel. Your agents now reach their arbiter over a private WAN.
Change the agent's base URL. It doesn't know anything happened.
Every operation is allowed, witnessed, or blocked — and signed as it happens.
Drop the receipt into the browser verifier. Don't take it on trust. Check it.
$ glacis connect wg0 up · tenant arbiter reachable · private WAN # agent config — one line - base_url: https://api.provider.example + base_url: https://arbiter-01.tenant.glacis # event stream 14:02:31 agent-billing tool.invoke allow 14:02:33 agent-support mail.send witnessed 14:02:36 agent-ops db.drop_table blocked # receipt 4f2c…a081 canonicalize (RFC 8785) ✓ SHA-256 ✓ Ed25519 ✓ chain ✓ ✓ VERIFIED IN YOUR BROWSER — nothing was sent anywhere
Simulated for illustration · the verification is real — run it on a real signed receipt below.
Verify it yourself
This is a real signed receipt. Verification runs in your browser — Ed25519 over SHA-256, canonicalized under RFC 8785. Nothing is sent anywhere.
Why teams point agents at us
When an agent does something wrong, "we think it was the model" is not an answer. A GLACIS receipt is a signed, hash-chained record of what the agent did, what policy applied, and what was blocked — evidence your customer, your counterparty, or your lawyer can verify without trusting you. And without trusting us. Logs are your word. Receipts are math.
The arbiter is yours alone — a dedicated per-tenant instance, reached over WireGuard by default. Adding an audit layer must not mean adding an attack surface. It doesn't.
One command brings up the tunnel. One line points your agent at it. The meter is the receipt count — the exact thing the Console proves — so the bill is as verifiable as the product. No seats. No free tier that quietly becomes your unprotected production path.
Private WAN · Assurance ladder
Most hosted AI tooling asks you to ship your prompts across the public internet to a multi-tenant SaaS. We think an audit layer that widens your attack surface is a contradiction. GLACIS Managed gives every customer a dedicated arbiter — your tenant, your instance, no shared queue — reached over a private WAN. The default is a one-command WireGuard connector. Enterprises can choose Twingate ZTNA or AWS PrivateLink instead. Your agents talk to the arbiter as if it were on your own network, because as far as routing is concerned, it is.
The honest boundary: Managed means Glacis operates the arbiter, so the base rung claims operational isolation — per-tenant, private transport, no multi-tenant mixing. It is not a claim that we cannot see payloads. That claim belongs one rung up, and it comes with its own proof.
| Rung | The claim | How you check it |
|---|---|---|
| Managed | Operational isolation. Private WAN, dedicated per-tenant instance. | Receipts + the connector config you control |
| + Nitro | Attested-blind. Enclave attestation proves we cannot read payloads. | Verify the enclave attestation document |
| PrivateLink / your VPC | Traffic stays inside the AWS backbone, or inside your account. | Your own VPC console |
| Self-hosted / airgap | The data plane never leaves you. | It's your box |
Each rung is an independently verifiable claim. That's the point of us.
Pricing
Launch pricing. The meter is the receipt count — the exact number the Console proves.
| Tier | Price | What you get | Receipt meter |
|---|---|---|---|
| Starter | $199/mo · card, month-to-month | A dedicated arbiter, private-WAN connector, Console, concierge onboarding. | ~100K receipts/mo included · $5 per 10K after |
| Team | $1,250/mo · billed annually ($15K/yr) | Everything in Starter, annual terms, policy tuning, evidence-pack exports. | Meter sized to your fleet · fair-use traffic clause |
| Assurance | from $36K/yr · sales-assisted | Nitro attested-blind enclave included, PrivateLink or your-VPC connectivity, white-glove. | Custom |
+ Nitro rung on any tier: +$250/mo — the enclave attestation is the proof, not the brochure.
Why is there no free tier? Because evidence only counts if it exists before the incident, and free tiers are where audit trails go to not exist. From $199 a month. Cheaper than the meeting where everyone asks who approved the agent.
Design partners
No logo wall. We don't show proof we don't have. Five design-partner slots, honestly labelled — when a slot fills, the customer's own verified receipt goes here, with their permission or not at all.
$199/mo locked 12 months · concierge onboarding · case-study permission asked, never assumed
$199/mo locked 12 months · concierge onboarding · case-study permission asked, never assumed
$199/mo locked 12 months · concierge onboarding · case-study permission asked, never assumed
$199/mo locked 12 months · concierge onboarding · case-study permission asked, never assumed
$199/mo locked 12 months · concierge onboarding · case-study permission asked, never assumed
Declared versus enforced is our whole product. It applies to this page first.
Launch week
Pay, run one command, point your agent — and screenshot your first verified receipt the same afternoon. First signed receipt from your traffic within two business days, or a full refund.
Agents are in production. The forensic trail isn't. The first EU GPAI penalties land August 2.
Can you prove it?