Trust you can audit

Every tool call in IKARUS now passes one gate: is this capability granted here by name, and what level is its class at right now. The Trust Center is where you see and set both, per context, across four levels: observe, explain, ask, execute.

The ledger records everything, including the calls the gate refused. The privacy inventory lists every data store actually on disk with sizes and record counts, and where a log does not exist the page says exactly that instead of inventing one. The emergency stop is a hold control, not a tap, and it halts running plans while blocking write, destructive, and external calls.

Building it surfaced a real finding: one older capability was reaching its service directly, around the gate, while the interface claimed it was governed. It is now a registered tool behind the same gate as everything else. That gap is why the gate gets audited rather than trusted.

All entries