The stack
One layer between your systems and your agents.
Read it top to bottom. Everything above EOS stays untouched. Everything below it inherits provenance. Execution returns to the systems of record, where it always lived.
Green tiers are the verified spine: 403 conformance cases at 0 failures, 45/45 tenant isolation, 9/9 write-path checks with no write method present. The agent gateway that serves this state to a model is design; the spine beneath it is not.
The contract
Seven labels. Every figure an agent receives carries one.
The failure mode of enterprise AI is not wrong answers, it is confident answers of unknown standing. Here, standing is explicit, and a model may not promote a figure from one label to another.
The boundary
What the automation may do here, and what it may not.
Visibility is not authorization. The automation here is dynamic calculation over governed data, not an agent: it never gains a permission because information appears in its context, and it never infers one from what it can render.
May, without asking
- Retrieve canonical state and the evidence behind any figure in it.
- Correlate, classify, summarize and explain across every connected source.
- Simulate and forecast, with outputs labeled scenario.
- Draft and propose; a proposal is a request a named person decides.
- Trace any disagreement to the dated records that produced it.
May not, ever
- Change an authoritative record on its own. With an owner's grant, an agent may only carry out a request a person approved, within set limits, through your own executor.
- Approve a transaction or create a binding commitment.
- Bypass a permission, or act across a tenant boundary.
- Represent a hypothetical action as a completed one.
- Conceal a contradiction, or fabricate evidence for a conclusion.
Independence
Why the trust layer cannot live inside a system of record.
Every vendor in the stack above will eventually offer an AI that explains its own data. None of them can referee a disagreement they are a party to: an ERP reconciling its own figures is grading its own exam.
The layer that decides what is true across systems has to be independent of every system it reads, or the answer is marketing.
EOS is that independence made structural: reading every system of record, authoritative over none of them, holding no write credential to any, and carrying out only what a named person approved, through your own executor. An evidence pack that verifies offline without us, so EOS stays replaceable without loss, is specified, not built yet. Your agents get one version of enterprise reality with the receipts attached, and no vendor, including this one, sits inside the loop deciding what they see.
Status, plainly
What exists today, and what is design.
| Layer and status | How it is established | Evidence |
|---|---|---|
| Read-only spine Verified | Verified, reproducible | 403 cases, 0 failed; 9/9 write path; 45/45 isolation. Run it yourself. |
| Canonical state and reconciliation Verified | Verified against fixtures | Conformance suites per connector. The pilot is the proving engagement; the investor page prices from that starting line. |
| Provenance and evidence packs Verified Design | Provenance verified offline; evidence packs specified, not built | Every figure carries its source and its dates. Receipts re-derived exactly; the release proof object verifies offline. Open it. |
| Model-provider connections Design | Declared, not active | Provider-neutral by recorded decision. Mirrored in /data/claims.json. |
| Agent gateway and authorization workflow Live | Built and tested | The MCP server serves an agent only what its owner-granted key may call. Execute is granted only by an owner, within per-action and daily limits, to carry out a request a person approved, through your own executor; EOS then verifies the result. |
The next step
Hand your agents something worth trusting.
Name two systems that disagree. The scoping conversation is thirty minutes and free, and the first artifact you get is a contested figure with its evidence attached, which is exactly what your agents are missing.