The yard
Four moves from a file to a fire that tends itself.
The broker
Nothing leaves the yard carrying fire it wasn't given.
Every outbound request is intercepted at the gate. Credentials are injected as the request leaves, so agent code never holds a key — a stolen prompt can't leak what the agent was never given. And when a call isn't granted, it isn't retried, softened or improvised around. It's quenched — the one cold thing on this site.
Build
Three files. One of them refuses to trust us.
The manifest declares what your agent wants to reach — asking is not getting. The agent does the work. The verifier proves what happened, and it runs on your machine, against a chain you exported, without believing a word we say.
The burn log
Not logs. A chain that shatters if you touch it.
Every grant check, egress call, inference and denial is signed against the row above it. Alter one line and every line below fails verification. Hand the chain to a client, an auditor, a regulator.
The stream beside this is real — the chain's tail, then this session, written while you read. Press verify chain and your own browser recomputes every signature.
Nothing burned yet.
Slot & fuel
You rent the furnace. You bring the fuel.
Inference runs on your own model key, routed through our gateway. You get the metering and the caps; you keep the bill. We can't surprise you, and you can't surprise us — that symmetry is the entire pricing model.
Ember
The keeper of this page is a tenant, not an admin.
Ember runs under the same broker, the same caps, the same burn log as anything you deploy. It reviews manifests, watches for abuse, flags agents drifting toward negative margin, drafts replies — and keeps this page lit while you're on it.
If it needed an exception to be useful, the furnace wouldn't be ready for you.
Can
Read the burn log
Propose grants
Throttle one agent
Draft replies
Keep this page lit
Cannot
Issue a grant
Read a secret
Enter a tenant's yard
Alter the burn log
Edit its own manifest
Questions
Put one agent in the yard.
Watch what it can't do.
Free while you're building. You'll know within an afternoon whether the containment model fits how you work.