AI that asks before it actsThe model proposes.
The model proposes.
The gateway decides.
An assistant for your whole company that can reach real tools: people's laptops, the web, internal systems. Every call is decided by your policy, confirmed by a person when it changes something, and kept as a signed receipt. Your AI key, your data, your rules.
ReceiptExample
- Tool
- files.read_text
- Who
- asha · studio
- Decision
- Denied
- Why
- Hard limit: system folders are never readable
- Receipt
- 00000412 · signed · chain intact
Policy decides
The AI proposes a tool call; the gateway decides with your written policy. New tools, folders and sites stay blocked until you allow them.
Drafts need a person
Anything that changes something is a draft first. Only the person it was made for can confirm it, in the app; the AI never can.
Signed receipts
Every call, allowed or denied, gets a signed receipt in a chain that cannot be edited without it showing.