Governed hosted execution

Run approved workflows with proof, not guesswork.

Build and verify a workflow locally, push an attested bundle, and replay it on managed infrastructure with zero per-run model cost. Every run re-checks its own evidence and halts for a person instead of guessing.

  • Deterministic replay
  • $0 per-run model cost
  • Auditable evidence
  • Halts instead of guessing
Synthetic Desktop six-step verified workflow with its evidence contract and zero model calls.
Synthetic Desktop PR #93 fixture. Not a live run, production data, or customer data.
The governed loop

Approve once. Replay deterministically. Halt when the screen disagrees.

The hosted control plane runs the same compiled program the local engine runs. A healthy run makes no model calls, and an unhealthy one stops instead of writing the wrong state.

Synthetic Desktop workflow library with a six-step halted workflow and a six-step verified workflow.
01 · Build & approve locally

Compile a demonstration into a governed program

Record a repeated task once on your own machine. OpenAdapt compiles it into a deterministic program you can replay, verify, and approve before anything leaves your device.

OpenAdapt Cloud compiled-program view listing steps with identity gates, irreversible actions, and halt points.
02 · Push the exact bundle

Approval is bound to the exact uploaded hash

A sanitized, attested bundle is accepted only when approval matches its exact hash. The compiled program shows every identity gate, verification check, and halt point before it runs.

OpenAdapt Cloud run detail: 18 steps completed, 0 wrong actions, and a live timeline of verified effects.
03 · Execute on managed infrastructure

Healthy runs replay deterministically, at zero model cost

Approved runs replay without model calls on managed runners. Every step re-finds its target and confirms the real system-of-record change, with a live timeline and per-run evidence.

Synthetic Desktop six-step halted run detail. It states that identity and postcondition evidence were insufficient, so the run stopped safely.
04 · Halt, don’t guess

When verification fails, the run stops safely

If a step cannot confirm it is acting on the right record, the run halts and shows exactly why, instead of guessing and writing the wrong state. A person reviews and teaches the fix.

Governed by default

Verification failures halt rather than guess.

Approval is bound to the exact bundle hash, healthy runs replay without model calls, and every run carries auditable evidence. See the current readiness of this deployment before you sign in.

OpenAdapt Cloud