Governance
Agents act.
People decide.
Anything irreversible waits for a person. Each workflow touches only the tools it needs, and every run leaves a record.
What it does
What you get
Approval gates
Sends, submissions and money stop for approval. Approve once, or give a standing approval for one room, tool and account.
Scoped access
Each workflow can use only the tools it is given. Credentials stay on your device, never in our database or the model.
A record of every run
What each run read, which tools it used, and what it did, kept for review.
Spending caps
A cost cap per run and a monthly cap per room. Neither can be exceeded.
In the product
An approval, and the record behind it
Cora wants to send a payment reminder
To: accounts@acme.example · Invoice 1043 · $8,400, 34 days overdue
Approve and sendEditRejectExample. Names and numbers are illustrative.
Where it stops for you: financial and destructive actions always ask again, even with a standing approval. Team-level roles and pooled approvals are in the Teams pilot.
Your data
- Your workspace, memory and credentials stay on your device, encrypted.
- Only the model calls leave your machine, to the provider you choose.
- Your data is never used to train models.
Works with
The rest of the product
Try it on your own work
Desktop app for Mac and Windows. Your first real result in one session. Scheduled runs catch up when your computer is back on.