Try it in your browser
Mint a receipt before we ask for anything.
Choose a governed path. Copy the exact install. Leave with a record you can check. No account, no card, no sales call.
- Choose a path
- Install
- Your receipt
Step 1 of 3
Choose one path to govern
We will turn this choice into a real policy line, an install snippet, and a receipt. Nothing is submitted.
Step 2 of 3
Put it in the path
Glacis runs inline, on your hardware. Your prompts and payloads stay there; the record carries commitments and decisions.
Install
pip install glacis
Govern one call
The floor is deliberately small: allow, flag, block. Glacis enforces the rule you set and records which of the three happened. It does not claim to judge whether your agent was right.
Step 3 of 3
Now there is something to check
The digest below was computed in this browser from the record you just made. Change one byte and it will not match.
Self‑signed
What you hold now. It says: I say this happened, and I have not edited the record since. That holds up with you and your team.
Witnessed
Receipts minted through the portal come back countersigned by an independent party outside your boundary, with an inclusion proof. That is the one you hand to an auditor.