Trust & limits

What Gate proves on irreversible writes, how a stranger checks it, and what we explicitly do not claim.

Surface updated 25 Sep 2026 · Public track record — incidents, monthly red-team cadence, evidence-head watch protocol, sampled uptime.

The question

Can this withdraw, payout, or bind still execute right now?

Clearance is binary under uncertainty: if the hop cannot prove allow, the write does not run. Timeout and unreachable are halt — never allow.

What holds

Fail closed — uncertain / timeout / unreachable → no write
Parent license revoked → child spend blocked
Independent verify — stranger opens the receipt with no login
Third-party production status only after a recorded exclusive-door weld

What we prove

Signed clearance state at hop time
Fail-closed behavior when clearance is denied or unreachable
Hash-chained receipts a stranger can verify
No bypass on the welded write path

What we do not claim

We do not prove model truth or complete application logs
We are not a seat license or Free/Pro API product
Checkout does not equal third-party production status
Gate is the clearance meter + weld; Velaru is the proof engine

Track record

Incidents, monthly red-team results, evidence-head watch protocol, sampled uptime. Closed in code is not history.

Open the public log · incidents.json

Legal & IP

Patent Pending #64/124,027 · Nisaba LLC · Operator: Demond Davis

Engine: velaru.xyz · Verify: velaru.xyz/verify

Home Weld a path Pricing