Private beta · Select partners only

Your agents act
beyond their mandate.

Tenuo issues task-scoped warrants that narrow as agents delegate.

Request Early Access GitHub ↗
SCOPE

Task-level authority

Each agent gets a warrant for its task. Specific tools, specific arguments, bounded lifetime. Bound to the holder's key, useless if stolen.

DELEGATE

Authority only narrows

No derived warrant can exceed its parent. Every delegation hop is cryptographically chained to the one before it.

VERIFY

Every hop is auditable

The full chain is signed and verifiable offline in ~27µs. Who authorized what, at which hop, with what constraints.

Warrants narrow at every hop

No child warrant can exceed its parent. Enforced cryptographically.

12 capabilities · ttl 1h query_db · search_kb read_file · draft_response query_db · /customers/* · 60s read_file · /templates/* · 60s User Orchestrator Research Agent Writer Agent DB Worker File Worker Signed at every hop. Full warrant chain verifiable offline.
Warrant — research task query_db /customers/* 300s
✓ query_db /customers/acme 200
✗ query_db /billing/inv path
✗ send_email ceo@acme no tool
Warrant — analytics task query_db /billing/* 120s
✓ query_db /billing/inv 200
✗ query_db /customers/acme path
✗ delete_row /billing/old no tool
Warrant — expired query_db /billing/* 0s
✗ query_db /billing/inv expired
✗ query_db /billing/reports expired

Drop-in for your stack

CrewAI LangChain LangGraph Temporal OpenAI SDK Google ADK AutoGen MCP A2A Kubernetes

Rust core. Open source. Ready for your pipeline.
Talk to us about your deployment