Compare independent observations of an Agent’s actions

Witness intelligence is being built to connect host, guest, Gateway and control-plane evidence.

What this means for your team

Correlate identity-bound observations into an investigable account of activity.
Keep evidence conflicts, missing visibility and source confidence explicit.
Surface suspicious behavior and route responses through configured policy and human authority.
Advanced fusion, lineage, export and cross-source detection remain under development; capture coverage is not universal.

A practical example

A Gateway sees a tool action while host evidence shows an unexpected destination; the future investigation view should retain both observations.

Select a step to read its explanation

Select a step below to see what happens and why it matters.

Collect the supported independent observations from host, guest, Gateway and control-plane sources. This pipeline is under development.

1 / 5

This example illustrates the journey. Select any step to explore it at your own pace.

Run an approved agent in an isolated microVM with governed authority.

Prepare approved agent images and connect the hosts that run them.

Control which models, tools and peer agents a run may reach.

Follow a live run and review its recording with the right access.

Investigate recorded agent sessions through evidence-linked findings, timelines and clips.