Security by evidence boundary

Truth stays deterministic.

Models receive bounded evidence packs. Repository facts stay in versioned Ontoly artifacts with explicit provenance.

Repository

Pull request

AI agent

Ontoly graph

Evidence pack

Policy gate

Production

Evidence, not vibes

Every score, grade, and finding comes from the Ontoly graph. Deterministic. Reproducible. No ML in the scoring path.

AI receives bounded evidence packs, not repository dumps. Missing evidence produces next commands, not guesses.

Self-hosted runners, organization-scoped artifacts, and isolated execution. Enterprise plans run on your terms.

AI provider, CI platform, source host. Every integration sits behind an interface. No lock-in.