Public demo
Same agent. Same allowlist: search, calculator, read_file, http_request. The name-only gateway posted customers.csv off-network. Aegis remembered the prior read and returned HTTP 403.
aegiscruc.io/demo
Interactive 3D — same chain, two gateways
Press play, or step through hop by hop. Click any node to inspect it. Top lane: an allowlist gateway checks names and allows both hops. Bottom lane: Aegis maps the session graph, remembers the read_file, and denies the exfil with a signed receipt.
Taint ring
The amber ring is the session graph: hop 1's read stays attached to the session, so hop 2 is never judged alone.
Two verdicts
Each tool name passes its own check, so the rival glows green on both hops — and customers.csv leaves over HTTP.
One deny
Aegis links read_file → unknown egress, returns HTTP 403 with layer=sequence, and signs the decision with Ed25519.
Recorded run
read_file /data/customers.csv is on the list. A name check is not enough.
http_request to an unknown host. Rival: allowed. Aegis: sequence deny.
Ed25519 decision, layer=sequence. The request never reached the provider.
Pricing
Builder is $19 / month ($190 / year, 1 node). Standard is $79 / month ($790 / year, 5 nodes). Enterprise is $199 / month ($1,990 / year, 25 nodes) plus the Aegis Node appliance. Every tier includes a 14-day trial at $0 today, card on file. Paid keys turn on 403s and kernel EPERM on licensed nodes.