Predicate Vault

Predicate Vault is the Control Plane and Audit system for managing AI agent authorization at scale.

If the IdP token is the passport, and the Sidecar is the border guard checking the visa — Vault is the Embassy. It's where visas are issued, revoked, and audited.

What is Predicate Vault?

While the sidecar acts as the local enforcer (the border guard), Vault is your command center (the embassy). It extends the Predicate Authority sidecar with centralized management capabilities that security teams need when operating fleets of AI agents in regulated environments.

Vault transforms scattered sidecars into a unified, auditable fleet:

• Manage policies centrally and push updates to all sidecars instantly
• Revoke compromised agents or intent hashes with global kill-switches
• Audit every authorization decision with WORM-ready, tamper-evident logging
• Monitor your entire fleet of sidecars in real-time
• Integrate with existing SIEM and security infrastructure

How It Differs From What You Have Today

Developers immediately pattern-match new tools against things they already know. Let's address that upfront.

Why not just use local SQLite and Datadog?

Core Capabilities

Centralized Policy Management (The End of YAML Drift)

Managing YAML files across dozens of sidecars leads to version drift and manual SSH updates. Vault provides a single source of truth with push-button deployment, full revision history, and instant rollback.

• Editor: JSON/YAML with syntax highlighting and validation
• History: Every revision saved with diff view
• Deployment: Push to all sidecars or target specific groups
• Rollback: One-click revert to any previous version

Global Kill-Switches (Stop a Compromised Agent in Milliseconds)

When an agent is compromised, you need to stop it immediately. Vault's kill-switches revoke by principal or intent hash, syncing to all sidecars in milliseconds.

• Principal revocation: Block a specific agent identity across all sidecars
• Intent hash revocation: Block a specific action pattern everywhere
• Kill switch: Emergency button to deny all requests
• Expiration: Time-limited revocations with auto-expire

WORM-Ready Audit Logging (Prove What Your Agents Did)

Compliance requirements demand immutable, verifiable audit trails. Every event is Merkle-tree anchored for tamper evidence, with 7-year WORM retention for SOC2, HIPAA, and regulatory audits.

• WORM events: Immutable, cryptographically signed
• Full context: Captures principal, action, resource, decision, and mandate
• Search & Filter: By principal, action, resource, decision, time range
• Export: CSV, JSON for compliance reports
• Verify: Merkle proof verification for any event

Fleet Management (Hundreds of Sidecars, One Dashboard)

Manage your entire fleet from a single dashboard. Real-time health, resource monitoring, and support for enterprise identity providers.

• Real-time status: See which sidecars are healthy, degraded, or offline
• Resource monitoring: Track CPU, memory, and authorization latency
• Identity modes: Okta, Entra ID, OIDC, and local identity providers
• Enrollment: Secure registration tokens for easy sidecar enrollment

SIEM Integrations (Stream to Your Security Stack)

Stream authorization events to your existing security infrastructure with pre-built connectors and custom webhook support.

• Pre-built connectors: Splunk, Datadog, Microsoft Sentinel
• Webhook support: Custom integrations via configurable webhooks
• Event filtering: Send only the events you care about
• Real-time streaming: Sub-second event delivery

Architecture

┌─────────────────────────────────────────────────────────────────┐
│                      Predicate Vault                            │
│  ┌─────────────┐  ┌─────────────┐  ┌─────────────┐              │
│  │  Policies   │  │ Revocations │  │   Audit     │              │
│  │  Manager    │  │   Manager   │  │   Vault     │              │
│  └──────┬──────┘  └──────┬──────┘  └──────┬──────┘              │
│         │                │                │                      │
│         └────────────────┼────────────────┘                      │
│                          │                                       │
│                   ┌──────▼──────┐                                │
│                   │ Fleet Sync  │                                │
│                   │   Engine    │                                │
│                   └──────┬──────┘                                │
└──────────────────────────┼───────────────────────────────────────┘
                           │
           ┌───────────────┼───────────────┐
           │               │               │
     ┌─────▼─────┐   ┌─────▼─────┐   ┌─────▼─────┐
     │  Sidecar  │   │  Sidecar  │   │  Sidecar  │
     │  Agent 1  │   │  Agent 2  │   │  Agent N  │
     └───────────┘   └───────────┘   └───────────┘

Future Roadmap

We're building more than a control plane. Here's what's coming:

Blast-Radius Simulation

Before deploying a strict new policy to your fleet, Vault will simulate the policy against your last 30 days of audit logs to show you exactly how many legitimate agent actions would have been blocked. Enterprise teams love this—it reduces the fear of breaking production.

Deterministic Post-Execution Verification

Pre-execution auth stops the attack. Soon, Vault will store cryptographic state-diff proofs (e.g., filesystem changes, DOM snapshots) to prove an agent actually succeeded at the authorized task. Not just "did it try?"—but "did it work?"

LLM-Assisted Policy Drafting

Draft strict, YAML-based Predicate policies using natural language (e.g., "Allow the agent to read S3 but block all internet egress"), which Vault compiles into deterministic rules. Human-readable intent, machine-enforceable policy.

Getting Started

Pro, Teams, and Enterprise users can access Vault directly from the dashboard:

For local development, use the open-source sidecar and SDKs:

• Predicate Authority SDK (Python)
• Predicate Authority SDK (TypeScript)
• Predicate Authority Rust Sidecar