three answers
The record
Why now
SEALED
within mandate · executed · written to ledger
GATED
judgment required · routed to a named human
DENIED
outside every mandate · did not execute · written to ledger
Append-only
Every seal, decision and refusal, chained and externally witnessed.
Independent external witness
anchors the chain beyond our reach
record · owner · hash
Sealed records, each holding the hash of the one before
SEAL
latest · append-only
Next
only forward
A record that starts now
Oversight evidence cannot be backfilled.
Product
Your AI acts. Timer Seal answers for it.
three answers
SEALED
within mandate · executed · written to ledger
GATED
judgment required · routed to a named human
DENIED
outside every mandate · did not execute · written to ledger
Timer Seal sits between an AI and every consequential action it can take. One question: is there authority for this? Three answers: allow, hold for a human, or refuse. Every answer, on the record.
01 The three answers
One question, asked of every consequential action.
SEALED
within mandate · executed · written to ledger
GATED
judgment required · routed to a named human
DENIED
outside every mandate · did not execute · written to ledger
- ALLOWActions covered by a mandate proceed at machine speed, each carrying a seal that traces back to the accountable human who set its bounds.
- HOLDDecisions that need judgment route to a named person. What the AI proposed, what the human did, and the difference between them, recorded.
- REFUSEAnything no mandate and no human has authorized doesn't happen on the sealed plane. Not filtered as "probably bad": unauthorized, so undone before it was done.
02 The record
A record no one can quietly rewrite.
Append-only
Every seal, decision and refusal, chained and externally witnessed.
Independent external witness
anchors the chain beyond our reach
record · owner · hash
Sealed records, each holding the hash of the one before
SEAL
latest · append-only
Next
only forward
Every seal, decision, and refusal is written to an append-only, cryptographically chained ledger, anchored to an independent external witness. Decisions are attributable to named humans. Sensitive content stays off-chain and erasable, so evidence and privacy obligations coexist by design.
FIG. 01 · Append-only, externally witnessed
- 01Independent external witness anchors the chain beyond our reach
- 02Sealed records, each holding the hash of the one before record · owner · hash
- 03SEAL latest · append-only
- 04Next only forward
We instrument. We never certify. Your auditors draw the conclusions; the ledger holds the facts.
03 Why now
The duties are here. The evidence has to start somewhere.
A record that starts now
Oversight evidence cannot be backfilled.
AI already denies claims, sets prices, sends money, and signs off. Supervisors across Europe now expect documentation, record-keeping, and demonstrable human oversight of exactly these systems, and decisions with legal effect on people carry those duties today, not at some future deadline. Oversight evidence cannot be backfilled: a record that starts now is an asset no late adopter can buy later.
04 The Mirror
Start with the ninety-day Mirror.
We run in pure observation on your real decision traffic. Nothing blocked, nothing disrupted, no workflow change. After ninety days you hold a tamper-evident record of what your AI actually did, who oversaw it, where judgment was real, and which decisions are effectively running on their own today with no named owner.
You keep the record either way. It's yours, in an open format, under your keys.
Request received.
A founder reads every one of these. You'll hear back personally.
We classified ourselves first
Before examining anyone's AI, we ran our own products through our own risk framework and the EU AI Act's high-risk test.
You own the record
Seal works with the AI systems you already run. Your records are exportable, always, at no cost: leaving us never means losing your history.
Research first
Built on the published Human Layer framework. The papers came before the product, and the maturity model is open for anyone to use.
No seal, no action_