Skip to content
Wardog

Technology // WARDOG Gate

The boundary between thinking and acting.

The Gate is deterministic code, not a model. It answers one question: is this specific action, on this specific asset, in this specific tenant, permitted right now — and for how long?

authority evaluation

Demonstration
  • Tenant boundarypending
  • Asset in scopepending
  • Evidence thresholdpending
  • Policy permits actionpending
  • Exclusionspending
  • Blast radiuspending
  • Reversibilitypending
  • Action expirypending

signed action authorisation

{
  "action": "isolate_endpoint",
  "asset":  "WS-4471",
  "tenant": "tn_8842",
  "evidence_root": "e3b0c442…9f24",
  "expires_in": "PT15M",
  "reversible": true,
  "status": "EVALUATING"
}

No token, no execution. Reasoning alone cannot act.

Evaluation

Eight checks, every time.

All checks must pass. A failure is a refusal with a stated reason, recorded alongside the incident.

  • Tenant

    The requested target must belong to the tenant the investigation is scoped to. Cross-tenant action is structurally impossible.

  • Asset

    The asset must exist, be in scope, and be in a state where the action is meaningful.

  • Evidence threshold

    Confidence must meet the threshold configured for that action class. Higher-impact actions demand more.

  • Policy

    The action must be explicitly enabled for that tenant, site and asset group. Default posture is deny.

  • Exclusions

    Protected assets, maintenance windows and named exceptions are honoured before anything else is considered.

  • Blast radius

    Computed reach is compared against configured limits. Exceeding them escalates to a human decision.

  • Reversibility

    Whether the action can be undone, and how, is part of the authorisation decision — not an afterthought.

  • Expiry

    Every authorisation is time-boxed. A stale token cannot be replayed into a later execution.

Signed action authorisation

Execution requires a token, not a decision.

Response executors accept a signed authorisation and nothing else. They do not read conclusions, prompts or confidence scores. This keeps the enforcement surface small enough to review.

  • Scoped

    Bound to one action type, one target and one tenant. It cannot be reused for anything else.

  • Signed

    Integrity is verifiable at execution time, so a request cannot be forged or altered in transit.

  • Expiring

    Short lifetimes mean an authorisation reflects the evidence that existed when it was granted.

  • Auditable

    Issue, use, refusal and expiry are all recorded and attached to the incident evidence record.

Request early access

WARDOG is in early access with a small number of design partners. Tell us about your estate and we will get back to you.

Talk to us