Human-gated · Verifiable · Yours

Put consequential actions behind a human decision.

CordonRail holds consequential automated actions until the right person decides, then records what happened so you can export and verify it yourself.

Join the pilot Open verifier

Anyone can verify an export — no account required. You can leave with your data anytime.

The verifier, as it looks — sample export shown. Run the real one at /verify.

Human final say
Export & verify anytime
Deletion on record
Your name on the workspace

Human final say

Sensitive and money-related steps wait for a named person — nothing auto-approves in silence.

Check it yourself

Export your record and re-check it here or offline with the same rules we use.

Deletion on record

When deletion is requested, CordonRail records what was requested, what the system completed, and the resulting receipt. Cryptographic key destruction is not claimed until mandatory encryption and hosted erasure evidence are in place.

What you run every day

Features that ship and stay simple — power underneath, calm on the surface.

Governed actions

Connect one typed action, observe it in shadow mode, then put a policy and named person in its path.

Approvals queue

One place for what needs a human. Approve or reject without hunting through email.

Export & verify

Hand a partner or auditor a file they can verify with the same checks you run on.

Up in minutes

1
Create a pilot workspace
Registration opens a preview workspace for the narrow pilot. Production use is agreed separately.
2
Run one governed action
See what would have been held, then require a named person before the action can execute.
3
Export proof
Download a proof file and open the public verifier whenever you need to show it.

Built differently on purpose

Same jobs you already know — with tighter defaults and less noise.

Beyond policy binders
You get the full path: gate the action, keep the record, export it, and verify it — not a PDF that says you should.
Not a black box
People decide on money and high-trust steps. That is the product, not a slogan.
Easy to leave
Export and go. We earn the right to keep you by making exit real.

Early access

Pilot registration is open.

CordonRail is in an early preview. The pilot is intentionally narrow: one integration, one typed action, one complete evidence path. It is not an unrestricted commercial sandbox; production use and commercial terms are agreed with each pilot team.

A scoped integration and your first typed action contract
Shadow-mode results before enforcement
Named human approval and recorded outcome
Evidence export and public verification — no account required

Join the pilot

Paid tiers land with general availability and will be published here first. Nothing you store is held hostage either way — export is a right, not a plan feature (P9).

No rented reviews. Check us yourself.

We are new, and we would rather show you something you can verify than a quote we could have typed.

Verify right now — no account

Open the public verifier and check a proof file against the exact rules production runs. Not a demo video — the real check.

Open the verifier →

See what was observed

The action trace separates platform-observed facts, caller-declared context, human decisions, and outcomes that still need reconciliation.

The exit is real

Export is a first-class feature, not a support ticket. Your history leaves with you — and still verifies after you are gone.

Join the pilot →

Ready when you are

Start with the narrow CordonRail pilot. Production use follows a separate review.

Join the pilot Sign in