Guard
Blocked unless explicitly allowed. Use for secrets, destructive data changes, protected production paths, and untrusted actors.
Orbit Authority Enterprise
Apply policy, standing approvals, exception workflows, receipts, and audit evidence across teams, tools, vendors, accounts, and agent surfaces.
Contact salesBlocked unless explicitly allowed. Use for secrets, destructive data changes, protected production paths, and untrusted actors.
Allowed inside a bounded mandate or after an approval. Use for deploys, payouts, trades, exports, and delegated work.
No checkpoint for low-risk activity. Keep routine work fast and reserve review for consequential actions.
Actor requests a consequential action.
vendor agent: export EU records
Orbit Authority checks authority and scope.
policy: region scope violation + vendor data class guarded
Allow, escalate to a human, or deny.
BLOCK. Owner can create a narrow exception if needed.
Receipt and audit trail recorded.
Evidence ledger records actor, vendor, region, policy, and outcome.
Team, account, vendor, tool, environment, and data-class scopes.
Recurring allowed actions with thresholds, expiry, and revocation.
Escalate to owner, wait, timeout, deny, and record the outcome.
Receipts, policy reason, approver, actor, session origin, export.