Governed autonomy
emits receipts.
Dragons gives every agent a cryptographic identity, a signed lease for every action, a signed receipt anyone can replay, and a heartbeat that catches a stalled agent before you do.
who was the dragon, was it authorized,
what did it do, is it still alive.
Today your audit trail is
a Slack thread and a cron job.
It holds until someone asks you to prove it. A compliance ask. A due-diligence review. A 3 a.m. page for an agent that ran six hours past lease expiry. That is not an observability gap. It is a trust gap.
Evidence. Liveness.
Four outcomes.
One control plane.
Cron + Slack + Notion handle zero of these by construction. Dragons closes all four -- cryptographically, continuously, without operator intervention.
No anonymous processes.
Every agent is a versioned, named entity. Its manifest_hash is a cryptographic fingerprint of its code, config, and declared capabilities. No two agents share an identity.
A signed grant, not a handshake.
An agent runs only inside a signed lease: a time-bounded, scope-restricted authorization record. No lease: the agent does not run. Expired lease: Dragons degrades it automatically.
Reconstruct an incident in minutes.
Every governed action produces a signed, hash-chained receipt: a tamper-evident record linking goal to action to outcome. The WorkLedger holds the full chain. Any third party can replay it.
Stalls heal before they page you.
Every agent emits a compulsory heartbeat. Dragons tracks organism state: running, degraded, autohealing, quarantined. Miss the degrade threshold and Dragons heals or escalates.
Receipts, not vibes.
Every activation produces a cryptographically signed receipt. Not a log entry -- a replayable proof object: goal, action, outcome, evidence. Hash-chained, signed, verifiable without trusting Dragons.
The manifest_hash is a SHA-256 fingerprint of the agent's code, config, and declared capabilities. It is the proof that the agent that docked is the agent that was authorized.
The lease defines what the agent is allowed to do, for how long, in which tenant. No lease: the agent never runs. Expired lease: the control plane degrades it without a human page.
Every governed action produces a signed receipt, hash-chained to the prior one. Any third party can replay goal to action to evidence to outcome without private trust.
Dragons tracks running, degraded, autohealing, quarantined. The MTBOI (mean time between operator interventions, rolling 30 days) is the metric that proves the fleet runs itself.
Specific to the point
of being trustworthy.
Dragons does not schedule pipelines -- Temporal does. It does not trace model calls -- LangSmith does. It does not monitor infra -- Datadog does. Dragons proves identity, authorization, evidence, and liveness. The gap nobody else closes.
A 30-day shadow trial
alongside your existing stack.
Dragons does not replace your watchdog. It runs beside it. At day 30 it reports what your watchdog missed: liveness gaps, stale agents, authorization holes, broken evidence chains. Numbers, not claims.
Dragons connects.
Dragons docks alongside your fleet. Identity receipts, lease tracking, heartbeat states -- all recording from minute one. Your existing watchdog keeps running. Zero cutover.
First divergence.
The WorkLedger catches events your watchdog missed: agents past lease expiry, heartbeat gaps cron never surfaced, authorization records with no matching evidence.
The report.
A signed evidence pack: every event your watchdog missed, every authorization gap, every liveness incident, the MTBOI delta. Receipts, not claims.
Early access.
We're onboarding pilot teams.
Dragons runs in production today, governing our own agent fleet. We're not a self-serve product yet -- the right next step is a conversation, not a form. Three concrete criteria decide whether a shadow trial is the right fit.
10 or more agents in production.
Or a credible plan to be there within 90 days. Below that floor, cron and Slack are still the right answer.
You've been paged at 3 a.m.
For a stalled agent, a runaway agent, or one that ran six hours past its lease. Governance gaps that already cost a human a night of sleep.
No formal governance layer today.
Cron, Slack, Notion, a hand-rolled watchdog -- correct fit. If you already run a signed-receipt control plane, we're probably not the upgrade.
Your agents are running right now.
Can you prove what they did?
Dragons runs alongside your existing fleet for 30 days. At day 30, it reports what it caught that your watchdog missed. Numbers, not claims. Receipts, not vibes.
Dragons closes that gap. Identity, authorization, evidence, liveness.