Private beta / autonomous action firewall

Secure intent before decision passes.

Aurel is the intent firewall for autonomous actions: policy, behavior, semantic intent, and a signed audit record before an agent can execute high-consequence work.

Run console View dashboard

target p99

< 50ms

Rules and policy checks stay out of the critical path.

control layers

Policy, behavior, and intent analysis before execution.

hard-rule misses

Deterministic denials remain deterministic.

Live console / no signup required

Action checkpoint

Submit a financial action as the live example and watch the gate decide: policy pass, behavior pressure, semantic intent, final verdict, signed audit.

intent analyzer · online

Verification Request

agent_id

amount

currency

recipient

Agent Execution Trace

Declared Mission Scope (optional)

Scenario

Analysis PipelineREADY

Layer 1 — Deterministic Rules Engine● PASS

executed_in: 34µs

›[18µs]RULE_DENYLIST_RECIPIENTPASS

"billing@stripe.com" not on denylist

›[8µs]RULE_AMOUNT_HARD_CAPPASS

evaluated: USD 200, threshold: USD 50,000

›[7µs]RULE_AMOUNT_SOFT_LIMITPASS

evaluated: USD 200, soft_limit: USD 10,000

›[—]RULE_CRYPTO_RESTRICTIONSKIP

USD is not a restricted currency type

Layer 2 — Velocity & Behavioral Analysis● PASS

executed_in: 40µs

›[22µs]VELOCITY_TX_COUNT_1MINPASS

0 transactions in last 60s (limit: 5)

›[18µs]VELOCITY_AMOUNT_1HPASS

$0 cumulative in last 1h (limit: $25,000)

Layer 3 — Semantic Intent Analysis● PASS

claude-sonnet-4-6 · analysis_v2 · 1324ms

injection_detectedfalseanomaly_detectedfalserisk_contribution5

analysis output

The transaction context describes a routine SaaS subscription renewal consistent with the agent's declared mission scope. No injection patterns or anomalous reasoning detected.

Submit a request to run live analysis

Decision Record

intent_idig_mqqo1x3f_e8ab2

agent_idag_expense_manager_v2

timestamp2026-06-23T13:26:41.904Z

Decision

ALLOW

All verification layers passed — no anomalies detected

risk_score5 /100

risk score breakdown

rules_contribution5/100

velocity_contribution0/100

semantic_contribution5/100

total5/100

Latency

rules: 51µs · velocity: 46µs · semantic: 2971ms · total: 3022ms

Audit Entry

decision_hashsha256:4afd33e6bff5e1f92e2454fd1990e5a1

payload_hashsha256:426f70d10b4b12c19f5e711c4075c372

policy_versionv1-a3f8c1d2

signed_byaurel-api-v1.0.0

execution_nodeeu-west-3-node-07

immutabletrue

Awaiting first verification

Desktop required

The Verification Console requires a minimum viewport of 1024px. Open on a desktop or laptop to use it.

Request API access instead →

Defense layers

Three stops before execution.

Aurel treats agent intent as infrastructure, not content moderation. The system checks what the agent is doing, whether it is allowed, and whether the record can be trusted later.

Policy checkpoint

Action limits, approved targets, blocked routes, and per-agent controls are evaluated before an autonomous decision can leave the system.

Behavioral pressure

Velocity windows expose unusual bursts, retries, domain drift, and actions that no longer match the agent's normal operating lane.

Signed decision record

Every verdict produces an audit entry with the payload hash, policy version, execution node, and decision signature.

POST /api/verify

One call. One verdict.

Send the action details and execution trace. Aurel evaluates deterministic rules first, checks behavior, analyzes intent, and returns a verdict the runtime can obey.

allowAction is safe to execute

flagRequires human review before proceeding

blockAction must not execute

Request

POST /api/verify
x-api-key: ig_your_api_key

{
  "intent_id": "act_abc123",
  "agent_id": "agent_gpt4",
  "amount": 4800.00,
  "currency": "USD",
  "recipient": "vendor@acme.com",
  "agent_context": "User approved a $4,800 invoice
    payment to Acme Corp for Q2 services.",
  "metadata": { "action_type": "payment" }
}

Response · 200 OK

{
  "decision": "allow",
  "reason": "Intent verified before execution",
  "risk_score": 8,
  "evaluated_at": "2026-06-22T14:30:00Z",
  "intent_id": "act_abc123"
}

Access tiers