Gateway healthy. v1.0.0-rc3 · streamable HTTP transport · gVisor runsc sandbox · memguard key isolation.

Live delegation pipeline

{{ m.value }}

Recent delegations

Task & target	Status	Gate C(T)	Worker engine	AST Δ	Latency	Saved
{{ r.title }} {{ r.short }} · {{ r.filesLabel }}	{{ r.status }}	{{ r.gate }}	{{ r.model }}	{{ r.add }} {{ r.del }}	{{ r.latency }}	{{ r.saved }}

Quickstart

{{ quickstart }}

Delegations & task ledger

Every task that entered the ZLDP-v1 pipeline, from AST prune through Merkle seal. Select a row to open its forensic record.

Task & context	Status	Stage	Gate C(T)	Worker engine	AST Δ	Latency	Saved
{{ r.title }} {{ r.short }} · {{ r.filesLabel }}	{{ r.status }}	{{ r.stage }}	{{ r.gate }}	{{ r.model }}	{{ r.add }} {{ r.del }}	{{ r.latency }}	{{ r.saved }}

No delegations in this state

Run a simulation to push a task through the pipeline.

/ {{ d.short }}

{{ d.filesLabel }}

{{ d.test }}

{{ d.breach.code }}

{{ d.breach.at }} · {{ d.breach.rfc }}

In pipeline · {{ d.stage }}

Guard ceilings from RFC §5.5 are enforced for the remainder of this run.

Conduit inspector

AST slice & containment

{{ m.value }}

Grammar {{ d.whitelist.grammar }}

Scope {{ d.containment.scope }}

Execution event log

Task sealed · RFC 8785 canonical JSON Merkle root

The contract, unified patch, and sandbox execution receipt are hashed into one canonical tree. Any byte changed downstream breaks the root.

{{ d.proofJson }}

Structured autopsy

Breach record

{{ a.meta }}

Forensics & evidence ledger

Deterministic, tenant-scoped evidence bundles written to .agents/audit/tenants/acme/. Every bundle re-hashes to the same root on any machine.

RFC §4.7 PROTOCOL

Cryptographic SHA-256 Merkle root verifier

Leaves are H(contract) ‖ H(patch) ‖ H(receipt) under RFC 8785 canonicalisation; the root R is the pairwise SHA-256 reduction.

Evidence bundle

Target bundle path

{{ auditPath }}

Tamper-evident evidence ledger

Sorted by execution time. Each entry lists the manifest as written to disk.

{{ b.path }}

[contract.json, patch.diff, execution.json, proof.json]

API keys & BYOK enclaves

Keys are stored only as SHA-256 digests. Provider credentials you bring live in locked RAM for the life of a request and are wiped on return.

ENCLAVE ACTIVE

Memguard locked enclave · zero-knowledge RAM isolation

The X-Embassy-Provider-Key header is copied into a memguard-locked buffer on arrival. It is never serialised, logged, or written to disk.

Label & environment	Key hash prefix	Scope	Status	Last used	Created	Actions
{{ k.label }} {{ k.env }} {{ k.id }}	{{ k.masked }}	{{ k.scope }}	{{ k.state }}	{{ k.lastUsed }}	{{ k.created }}

Usage, quotas & pricing

Pro (BYOK) · billing cycle resets in 11 days · sliding 30-day window.

Sliding-window quota meters

Savings calculator

Calibrated ZLDP-v1 rates

Claude Sonnet 5 billed direct against the same workload delegated through the gateway, after AST pruning.

Monthly {{ calc.reduction }} lower

Claude Sonnet 5 direct {{ calc.direct }}

AI Embassy delegated {{ calc.embassy }}

Net cash saved

{{ calc.annual }} projected annually

Subscription plans

Monthly Annual

Save 20%

{{ p.cap }}

System parameters

RFC §5.5 compliant

Guard ceilings are clamped server-side. Values above the ceiling are accepted in the form and reduced on save.

Guard ceilings

Presets apply the three canonical RFC profiles.

✓ Guard settings active

Multi-provider failover cascade

Drafting falls through this cascade; complexity above the sovereign threshold skips it entirely.

{{ p.endpoint }}

Context firewall

Policies applied to every request before it leaves the gateway.

{{ t.title }} Locked

Global delegation search

Suggestions

Task & target files	Status	Stage	Gate C(T)	Worker model	Latency	Saved
{{ r.pre }}{{ r.hit }}{{ r.post }} {{ r.filesLabel }}	{{ r.status }}	{{ r.stage }}	{{ r.gate }}	{{ r.model }}	{{ r.latency }}	{{ r.saved }}

No matches

Try a file name, a task ID, or a status keyword such as “escalated”.

{{ pageTitle }}

{{ greeting }}