Governance & provenance

Audit by construction — not after the fact.

Governance is the trust layer underneath everything Osora does. Every rule traces to a human and a moment; every agent action is bound to the rule that authorized it. The audit trail isn't bolted on — it's how the system is built.

Osora · Action log
Sent finance the sign-off reminder
Allowed
Authorized by Rule · finance sign-off Maya · 4:12
Auto-ship to prod
Refused

A contradicted rule blocks the run — the skill won't guess past its authority.

Every action gated by the skill's maturity verdict.
Action provenance

Every action bound to the moment that authorized it.

When a skill acts, the action carries a link to the human rule and the recorded moment that permitted it, so the provenance is created at the instant of action rather than reconstructed later.

Osora · Action provenance
  • Each agent action ties back to a human-authored rule
  • Each rule ties back to a recording and a decision
  • A complete, queryable action log out of the box
Maturity gates authority

Nothing runs unsupervised until it has earned it.

The governance verdict decides what a skill may do: an immature skill predicts and suggests, only a proven one acts on its own, and a single wrong case pulls its authority back down.

Osora · Maturity gates authority
  • Authority scales with demonstrated maturity
  • Contradicted rules block auto-runs by default
  • Refusals are first-class, not exceptions
Least privilege

Read-only by default, governed when it acts.

Osora watches without touching — no shadow accounts, isolated tenants, zero-retention inference — and when the system does act, it acts under a governance verdict you inspect.

Osora · Least privilege

Read-only by default, governed when it acts.

Built in by default
The trust controls

Built for fast-scaling and regulated teams alike.

Provenance per rule.

Every rule names the human and the moment behind it — provenance by construction.

Governed execution.

Actions run only under a verdict, gated by the skill's maturity and refusals.

Tenant isolation.

No shadow accounts, isolated tenants, and zero-retention inference by default.

Governed execution with action-provenance: every agent action bound to the human rule and moment that authorized it.
Audit by construction
The rest of Osora

Works with everything else

Trust your agents because you can prove them.

Provenance, maturity gates, and an audit trail that builds itself.