THE APPROVE GATE
Everything leads to the staged move.
Every surface ladders to the same moment: here is the move, here is why, approve or not. That gate is product law and safety law at once.
ALWAYS ON The gate is how every Wing ships: advisor first, actions only behind your approval.
Staged with reasons, never fired
A draft reply, a budget shift, a fix note: the cockpit stages the move with the evidence that produced it. Approval is per action and per session, never generalized, and reading untrusted content can never trigger a write by itself.
STAGED MOVE
The reply to the Thursday reschedule thread is drafted from the meeting notes. Approve it and it sends; skip it and nothing moves.
Everything on the record
Every agent action is logged immutably: actor, tool, inputs, approval, result. The audit trail is built to be read, not filed away, and you can cut any connection instantly.
Trust is a dial, not a switch
The destination is autonomy you turn up one legible step at a time: advise, propose, act within limits you set. Read-only ships first in every Wing; nothing acts until you have seen it advise well.
What it costs
PROVISIONALPrices are provisional until billing opens. Nothing can be bought yet. No card, ever - the cockpit stays free. Join to lock early pricing