Runtime assurance for AI systems
AI everyone can stand behind.
A receipt for every governed action — one your board, your customers, and your regulator can check without trusting us.
Why runtime
Trust is earned at runtime.
AI that acts on people deserves evidence anyone can check. That evidence is made in exactly one place: the moment a governed action runs. Glacis stands in the request path at that moment, with three jobs.
See
Which controls ran. Which didn’t.
Fleet-wide coverage and drift — not event volume.
Control
Block what shouldn’t run. Allow what should.
Inline at the inference boundary. Deterministic, policy-driven, model-agnostic. No retraining, no swap.
Prove
Signed. Witnessed. Portable.
Every governed action becomes an OVERT receipt. Portal minting adds an independent witness countersignature. Verifiable without a Glacis account.
“Together, Glacis and nVoq have raised the bar for proactive AI trust and assurance, embedding consent validation, human‑in‑the‑loop oversight, and robust guardrails directly into ambient workflows.”
Chad HinerSenior Vice President of Product, nVoq
Verification vs validation
Two questions. Your stack answers one.
Verification: did it work? Validation: did it stay inside your rules? Most enterprises instrument only the first.
Where GLACIS fits
GLACIS is the evidence layer your stack stands on.
Each category below is good at its job. None was built to sit in the AI request path, stop an action that breaks a stated rule, and hand a counterparty evidence they can check without trusting the system that produced it.
| Runtime enforcement | Signed evidence | Portable proof | |
|---|---|---|---|
| Governance platforms OneTrust · Credo · etc. |
— policy only | — PDF reports | — vendor-locked |
| Model evals Patronus · Galileo · etc. |
— scores, not gates | — eval scores | — vendor-locked |
| LLM observability LangSmith · Helicone · etc. |
— traces, not gates | — unsigned traces | — vendor-locked |
| Platform telemetry & posture Microsoft Purview · Grafana + OpenTelemetry · DSPM |
— at the data layer | — audit logs, unsigned | — tenant-bound |
| GLACIS | ✓ inline arbiter | ✓ OVERT receipts | ✓ verifiable by anyone |
Glacis sits inline at the inference boundary and signs a record of which control ran on a governed action and what it decided — evidence a control ran, not a certificate the system is safe, correct, or compliant. Receipts minted through the portal are countersigned by an independent witness and carry an inclusion proof; SDK receipts are operator‑signed only.
Receipt chain
What an auditable AI decision looks like.
Every governed action mints a hash-chained receipt. Portal-minted receipts add an independent witness. Tamper one — the verifier shows where.
Simulated for illustration
The buyer, the carrier, the regulator
The same question, on three letterheads.
The questionnaire that just landed. The E&O renewal. The deal in security review. Each is starting to ask the same thing: show what your AI did, in a form an outsider can check. OVERT makes that answer a single portable artifact — the evidence pack.
- InsuranceE&O carriers are carving out autonomous-agent action. The renewal conversation increasingly turns on runtime evidence.
- RegulationThe EU AI Act and Colorado’s automated-decision rules are converging on the runtime receipt: the disclosable record of a consequential decision.
- ProcurementSecurity reviews have begun asking for third-party-verifiable runtime audit artifacts. Deals move faster when you can hand one over.
Verify it yourself
Don’t take the receipt on trust. Check it.
A real signed receipt. Verification never leaves your browser.
Glacis is the steward of OVERT.
Observable Verification Evidence for Runtime Trust: evidence independent parties can verify without protected‑content egress. Every receipt on this site carries it.
Someone will ask. You’ll already have the answer.
A procurement questionnaire. A renewal. A board asking about the AI. Each goes better when the evidence already exists: a runtime receipt for every governed action, an evidence pack the regulator, customer, or insurer can verify themselves. Live in weeks — and there’s a real receipt on this page you can check right now.