RAVENHELM

RAVENHELM / PRODUCTION CHANNEL

AI eliminated the cost of building.
It did not eliminate the cost of being wrong.

Agents are taking actions that used to require a human with a badge, a ticket, and a name. The grant hops. Capabilities get forwarded. Constraints get dropped. Then someone says “the algorithm decided.”

That sentence is 2026’s “just following orders.”

BEGIN DISCOVERY → READ THE BEEP

01

THE RUNTIME / CONSTRAINT BEFORE THE ACT

Runestack

Accountable agent issuance. Durable name. Short-lived proof. Attenuated grant. Policy check. Witness. Expiry. Then, and only then, a projection into whatever consumer asked.

Delegation chains
Authority flows from humans to agents through explicit, verifiable delegation. Scoped permissions, time-bounded access, revocable credentials.
Signed receipts
Every consequential action produces a cryptographic receipt. External verification means you don't trust the system; you verify it.
Mutation containment
Agents operate within declared boundaries. State changes are tracked, constrained, and reversible. No silent side effects, no undeclared writes.
The stack
Not “an AI gateway.” IAM as the umbrella, then the whole alphabet: IDM · IdP · SSO · federation · SCIM · CIAM · IGA · MFA · passwordless · AuthN · AuthZ · FGA · ReBAC · ABAC · PBAC · policy-as-code · PDP · PEP · PIP · PAP · PAM · JIT · least privilege · capability security · UCAN · ZCAP · PKI · CA · CLM · HSM · KMS · secrets management · mTLS · workload identity · SPIFFE · WIMSE · RATS · attestation · DID · VC · SSI · ZTNA · API gateway · MDM · RADIUS · NAC · SCM / checkout occupancy · SIEM · UEBA · audit trail · CT / transparency log · tamper-evident ledger · Merkle anchor · SLSA / in-toto · GRC / prove-it
Status
Building in the open. Core primitives under active development. Manifesto

02

THE GUARD / WITNESS AFTER THE ACT

Heimdall

Operational visibility and investigation. The system that watches what agents and services actually do, independent of what they report doing. It runs in production today; what it proves isn't yet inspectable by anyone outside the estate.

Status
Single-estate implementation, not generalized. Systems index

03

THE LAW / CONSERVED RESPONSIBILITY

The grant may attenuate.
The human does not.

Agents cannot yet be held accountable. Accountability does not divide. Delegated authority must not be diluted. Authority without accountability is just permission, and permission without proof is a liability with good marketing.

The physics
Every interaction an agent has is priced; nothing is consumed without account; the math is the audit. Agentropy, DOI 10.5281/zenodo.20818597
Risk
An unaccountable delegate is an audit finding waiting to happen. A signed, anchored chain is the incident you can prove you contained.
Cost
The accountable version does not cost more to build. It costs less to defend later.

THE PROOF / EXTERNALLY ANCHORED RECORD

What nobody sold you is the last branch: accountability. Not a SIEM row. Not a vault. Not an IdP sub. A witnessed receipt that answers: what did the agent do, which human authorized it, and prove the log was not rewritten.

A Base Sepolia testnet commitment anyone can inspect without Ravenhelm’s cooperation. Full record

COMMITMENT ROOT
974dacc788a78d9bcd35a1b77df6ee934a0ce08ec140f9bc265515a4deefe40b
NETWORK
Base Sepolia
BLOCK
44531898
REGISTRY
0x92015045F5A3Da316e1F6E948442495c7D54427d

View Base Sepolia transaction

SIGNALS / FIELD NOTES

What we are paying attention to.

CAMPAIGN

The Beep

A beep from an AI subagent becomes a forensic CLI and a claim about delegation without contract.

FIELD NOTE

The row

Six years at the presales-to-delivery boundary, one spreadsheet row, and the sixty-year-old mathematics it was hiding.

FIELD NOTE

Nothing scripts the eyebrows

A face that infers emphasis from the loudness of its own voice, fifty times a second. No animation track, no keyframe, no list of words.

BEGIN / DISCOVERY

We don't demo before discovery. That's the point.

Begin discovery

THROUGHLINE

Novelty is common.
Continuity requires engineering.