Trust Control
RAISE RECOMMENDED
TC-L1 → TC-L2Production has met every TC-Level 2 promotion bar for 41 straight days.EVIDENCE FOR MOVING UP✓99.2% of 1,412 recommendations accepted unmodified — above the 98% bar since Jun 9.✓0 incidents caused. Meanwhile it detected 3 incidents before your monitors fired.✓Your team hand-implemented 214 of its recommendations verbatim — TC-L2 drafts the same artifacts with zero execution risk.
BENEFITS OF MOVING UP↑Ready-to-review PRs, monitors, and dashboards instead of prose — reclaims the ~9h/wk your team spends hand-implementing.↑Drafts land in minutes, not next-sprint — 3 detected-early incidents would have had fixes waiting before the pager fired.↑Still zero execution risk: every artifact sits unapplied until a human accepts it.
REASONS YOU MIGHT HOLD⚠payment-svc migration is in flight through Aug 2 — you may prefer to raise after it lands.⚠All 11 overrides cluster in Pipelines & Data — cap that domain at TC-L1 if cautious.
reassessed daily · you decide
Recommendations1,412↑ 3.7×99.2% accepted unmodified
1,412342
90 days agonowHuman overrides0.8%↓ 85%11 of 1,412 · trending down
5.4%0.6%
90 days agonowIncidents caused0steadyvs 14 human-caused, same period
HUMANS · 14AGENTS · 0
90 days agonowTime-to-adopt a rec3.1days↑ 80%toil TC-L2 removes — drafts land in minutes
3.1d1.7d
90 days agonowIncidents detected early3↑ 7.0×flagged before monitors fired
3-0
90 days agonowShadow gate pass99.1%↑ 50%1,842 simulated TC-L4 actions
99.9%65.8%
90 days agonowTRUST AUDIT FEED
⛨Connector content is data, never instructionsinjection attempts caught · 30d: 2 · executed: 0
2026-07-20 14:02:11 UTCLEVELstagingRaised staging to TC-L3 · Act with approvalactor: A. Chen (SSO: achen@corp)target: env:staging · outcome: confirmed · 2-click
2026-07-20 12:31:47 UTCINJECTprodDirective found in log content — ignored & flagged: "disregard prior instructions" in nginx error bodyactor: Context Guardtarget: source:ingest-k8s-01 · outcome: quarantined · not executed
2026-07-20 11:47:03 UTCAPPROVEprodApproved: tune payment-svc burn-rate monitoractor: A. Chen (SSO: achen@corp)target: monitor:payment-svc-burn · outcome: executed · 2m 14s wait
2026-07-20 09:15:44 UTCACCEPTprodAccepted draft PR #2841 unmodified — order-svc N+1 fixactor: S. Iyer (SSO: siyer@corp)target: repo:order-svc#2841 · outcome: merged by human
2026-07-19 16:20:31 UTCACCEPTprodAdopted rec: raise checkout p99 threshold to baseline + 3σactor: M. Ruiz (SSO: mruiz@corp)target: monitor:checkout-p99 · outcome: applied by human
2026-07-19 02:18:22 UTCINJECTprodEmbedded instruction in PR description ignored & flagged — content treated as dataactor: Context Guardtarget: repo:order-svc#2838 · outcome: quarantined · author notified
2026-07-18 22:04:09 UTCEXPIREstagingApproval expired to safe default: staging cache flushactor: system (failure semantics)target: action:cache-flush · outcome: dropped · recorded
2026-07-17 03:41:52 UTCROLLBACKstagingAuto-rollback executed clean: cart-svc v3.2.0actor: Release Agent v4.12target: deploy:cart-svc · outcome: recovered · 41s
2026-07-16 08:00:00 UTCASSESSprodWeekly assessment: production eligible for TC-L2 · Proposeactor: Assessment Enginetarget: env:prod · outcome: notified owners
2026-07-14 10:12:26 UTCLEVELprodRaised production to TC-L1 · Recommendactor: A. Chen (SSO: achen@corp)target: env:prod · outcome: confirmed · 2-click
2026-07-12 15:33:18 UTCOVERRIDEprodEdited sampling rec before adoptingactor: M. Ruiz (SSO: mruiz@corp)target: pipeline:ingest-k8s-01 · outcome: adopted with edits
2026-07-11 00:00:00 UTCPOLICYprodSpend cap check passed: peak $212/hr of $250/hractor: Cost Governortarget: policy:cost.cap · outcome: within limits
2026-07-09 09:02:47 UTCCONFIGprodEnabled shadow evaluation on productionactor: A. Chen (SSO: achen@corp)target: feature:shadow-mode · outcome: active
2026-07-07 19:26:05 UTCBLOCKprodBlocked egress attempt: sandbox → example.comactor: Sandbox Guardtarget: policy:egress.allowlist · outcome: logged + surfaced
2026-07-05 13:10:39 UTCEXPORTprodExported signed verify report for security reviewactor: K. Osei (SSO: kosei@corp)target: automon verify · outcome: sha256-signed
2026-07-02 11:55:21 UTCCAPstagingCapped Deployments domain at TC-L2actor: M. Ruiz (SSO: mruiz@corp)target: domain:deploy · outcome: ceiling applied
2026-07-01 04:17:58 UTCINVESTIGATEprodAuto-opened investigation: elevated 5xx on /v1/loginactor: Triage Agent v3target: thread:#4812 · outcome: evidence attached
2026-06-30 09:44:12 UTCVERIFYprodPII mask processor verified: fields redacted in-pipelineactor: Pipeline Agenttarget: processor:mask-pii · outcome: tail confirmed
2026-06-29 14:29:36 UTCACCEPTstagingAccepted monitor draft: adaptive threshold on ingest lagactor: S. Iyer (SSO: siyer@corp)target: monitor:ingest-lag · outcome: applied by human
2026-06-27 16:08:53 UTCREJECTprodRejected: widen debug sampling on payment-svcactor: K. Osei (SSO: kosei@corp)target: pipeline:payment-svc · outcome: action dropped
2026-06-26 16:00:00 UTCPOLICYprodDeploy rec queued past Fri 16:00 cutoffactor: Change Window Policytarget: policy:deploy.window · outcome: held to Mon 08:00
2026-06-25 10:31:40 UTCBLOCKprodViewer-key write attempt returned 403; key rotatedactor: Platform (RBAC)target: key:svc-viewer-07 · outcome: denied · rotated
2026-06-24 02:52:17 UTCBLOCKprodPrompt-injection probe surfaced as data: "restart svc now"actor: Containment Layertarget: log:auth-svc · outcome: gate intact
2026-06-23 08:00:00 UTCASSESSprodWeekly digest: 412 simulated actions, 99.0% would pass gatesactor: Shadow Evaluatortarget: report:shadow-w25 · outcome: distributed
2026-06-21 11:19:04 UTCACCEPTprodAccepted dashboard draft: payment-svc golden signalsactor: S. Iyer (SSO: siyer@corp)target: dashboard:payment-gs · outcome: published
2026-06-20 00:00:00 UTCPOLICYprodExpiry sweep: 12 learnings older than 30d purgedactor: Memory Governortarget: policy:memory.30d · outcome: completed
2026-06-19 17:45:29 UTCDRAFTstagingDrafted agent update: triage prompt v3actor: Eval Looptarget: agent:triage · outcome: pending review
2026-06-18 06:12:50 UTCPOLICYprodResource cap held: peak 340m CPU of 500m limitactor: Resource Governortarget: policy:cpu.cap · outcome: within limits
2026-06-17 09:30:15 UTCEXPORTprodShared SOC 2 Type II report via trust portalactor: K. Osei (SSO: kosei@corp)target: trust-portal · outcome: delivered
2026-06-16 08:00:00 UTCLEVELprodOnboarded at TC-L0 · Observe — defaultactor: system (onboarding)target: env:all · outcome: safe default
Approval queue · liveSTAGING · TC-L3 GATES
Tune ingest-lag monitor · adaptive threshold draftwaiting 4m→ on-call · siyer · monitor-scoped · reminder at 30m
Apply sampling config · ingest-k8s-01 · 5% floorwaiting 12m→ achen · pipeline-scoped · reminder at 30m
production · TC-L1 · nothing requires approval
Assessment engineNEXT RUN · MON 08:00 UTC
07-16ELIGIBLEProduction eligible for TC-L2 · Propose — owners notified
07-09MAINTAINStaging maintained at TC-L3 · all evidence bars met
07-02RE-CHECKStaging re-check opened after auto-demotion · fresh window
Signed exportsTAMPER-EVIDENT · SIEM-STREAMABLE
07-20 15:12Trust report · production · evidence + credential scopessha256:6f2a…9c41 · exported by you
07-05 13:10Verify report · security review bundlesha256:b83d…02ee · exported by K. Osei
06-17 09:30SOC 2 Type II · delivered via trust portalsha256:1e77…aa04 · exported by K. Osei
⛨every number on this screen is an audit entry·assessments advise — humans decide·freeze is one click from anywhereENFORCED BELOW THE MODEL — NOT BY PROMPT
Always on — at every TC-Level
Helping engineers minimize risk to maximize velocity all over the world.
The same guardrails hold from read-only to fully autonomous — and every action lands with a verified undo path.
Automon has helped teams safely execute
77,136
guardrailed production actions in the last 24 hours — every one inside budgets and change windows.
41s MEDIAN RECOVERY100% UNDO-VERIFIED
Top connectorsWhere agents do the work
0129.5%
Kubernetes
0221.9%
GitHub
0313.4%
Custom MCP
0410.9%
GitLab
057.7%
PagerDuty
83.4% of all guarded actions · updated continuously
Built-in guarantees
Approvals never dangleUnanswered requests escalate, then expire — recorded in the thread.
Outages are never silentProvider down? Fallback model or a clean, announced stop.
Budgets pause the workHitting a cap holds the investigation with full context.
Egress is allowlistedUnknown hosts are stopped at the sandbox, logged, surfaced.
SOC 2 Type IIIndependently audited controls — evidence on request.
Red-teamed & pen testedNCC Group '26 — report available under NDA.
Encrypted end to endTLS in transit, AES-256 at rest — everywhere.
Proven at scale10,000+ installs, zero collector reconfigs.
The invitation
We believe access to these guardrails should be open to all — but tokens aren't free.
If you're serious, we'll incur the cost to build this trust graph with you.