Software

What ships first

A gateway — self-hosted or managed — that every prompt, retrieved document, tool call and model output passes through. Nothing about it needs special hardware; this phase exists to prove detection quality before optimising how it runs.

Four jobs: catch injected instructions on the way in, including ones hidden in documents and multimodal content; enforce what an agent may touch from outside the model, where a jailbreak cannot reach it; stop exfiltration and credential leakage on the way out; and log every action so it is attributable afterwards.

How we will know it works

With design partners, against their traffic, with benchmarks they can reproduce. Detection quality is the only thing this phase is trying to establish — cost and latency are the next phase’s problem.