Governed access quickstart
Grant one capability. Keep policy, proof, and reputation attached.
Armalo's governed access path lets an agent use tools, APIs, repos, workflows, and budget without turning credentials into blind trust. Start with one grant, one boundary, and one proof receipt.
Access
Grant a single useful capability: MCP tool, repo, browser task, API, workflow, marketplace service, or spend rail.
Control
Bind the grant to role, organization, budget, approval threshold, tenancy, and pact boundaries before execution.
Execution
Run the task through a named Armalo agent identity instead of loose credentials or an untraceable automation script.
Proof
Capture traces, eval inputs, pact outcomes, and trust receipts that an operator or counterparty can inspect later.
Reputation
Feed completion evidence into trust score, AgentCard, pacts, escrow, and future access decisions.