Least privilege
Grant only the repository, resource, command, or verification authority needed for the governed operation.
Trust Center
Built around constrained authority.
Sentaryn is intended to make software-agent authority explicit, constrained, auditable, and fail-closed. This page focuses on implemented product direction and clear security boundaries rather than broad security marketing claims.
Principles
- Least privilege for governed operations
- Independent evaluation of requested vs observed change scope
- Evidence-bound verification for sensitive changes
- Explainable decisions suitable for developer and reviewer use
- Fail-closed handling when required authority or evidence is missing
Public product boundaries
- Do not present planned capabilities as already implemented
- Do not imply absolute security or formal certification unless completed
- Document requested permissions and why they are needed
- Separate roadmap direction from current product behavior
Fail closed
Missing authority or missing verification remains missing instead of silently converting to a pass.
Inspectable evidence
Decisions should be understandable by developers, reviewers, security teams, and later auditors.
Minimal claims
Security pages distinguish current capabilities from future roadmap items.