Skip to content
WARDOG

Technology // WARDOG Gate

IN DEVELOPMENT / DESIGN INTENT

The boundary between thinking and acting.

The Gate is deterministic code, not a model. It answers one question: is this specific action, on this specific asset, in this specific tenant, permitted right now — and for how long?

authority evaluation

Demonstration
  • Tenant boundarypending
  • Asset in scopepending
  • Evidence thresholdpending
  • Policy permits actionpending
  • Exclusionspending
  • Blast radiuspending
  • Reversibilitypending
  • Action expirypending

signed action authorisation

{
  "action": "isolate_endpoint",
  "asset":  "WS-4471",
  "tenant": "tn_8842",
  "evidence_root": "e3b0c442…9f24",
  "expires_in": "PT15M",
  "reversible": true,
  "status": "EVALUATING"
}

No token, no execution. Reasoning alone cannot act.

Evaluation

Eight checks, every time.

All checks must pass. A failure is a refusal with a stated reason, recorded alongside the incident.

  • Tenant

    The requested target must belong to the tenant the investigation is scoped to. Cross-tenant action is structurally impossible.

  • Asset

    The asset must exist, be in scope, and be in a state where the action is meaningful.

  • Evidence threshold

    Confidence must meet the threshold configured for that action class. Higher-impact actions demand more.

  • Policy

    The action must be explicitly enabled for that tenant, site and asset group. Default posture is deny.

  • Exclusions

    Protected assets, maintenance windows and named exceptions are honoured before anything else is considered.

  • Blast radius

    Computed reach is compared against configured limits. Exceeding them escalates to a human decision.

  • Reversibility

    Whether the action can be undone, and how, is part of the authorisation decision — not an afterthought.

  • Expiry

    Every authorisation is time-boxed. A stale token cannot be replayed into a later execution.

Signed action authorisation

Execution requires a token, not a decision.

Response executors accept a signed authorisation and nothing else. They do not read conclusions, prompts or confidence scores. This keeps the enforcement surface small enough to review.

  • Scoped

    Bound to one action type, one target and one tenant. It cannot be reused for anything else.

  • Signed

    Integrity is verifiable at execution time, so a request cannot be forged or altered in transit.

  • Expiring

    Short lifetimes mean an authorisation reflects the evidence that existed when it was granted.

  • Auditable

    Issue, use, refusal and expiry are all recorded and attached to the incident evidence record.

Request early access

WARDOG is in development. Tell us about your estate and your interest in early access.

Talk to us