Security
Assume the agent will be wrong sometimes.
Agents are fast, literal, parallel and sometimes wrong, and they read untrusted text all day. Heighliner is built so a wrong agent costs little: contained, budgeted, gated and recorded.
Controls
01
Isolation
A sandbox per agent and a network namespace per fleet. Egress leaves only through Heighliner's gateways.
02
Credentials
Model keys and connector credentials are attached at the gateway, outside the sandbox. Agents get short-lived, narrow credentials, never the owner's keys.
03
Approvals and escrow
Irreversible effects are held in an escrow outbox until a person approves and the run commits.
04
Tamper-evident audit
An append-only, hash-chained event log with signed checkpoints, and a receipt for every run.
05
Redaction
Secrets and personal data are redacted before traces are stored.
06
Your boundary
With BYOC, data and traces stay in your cloud account. Self-hosted installs can run fully air-gapped.
Status
Heighliner is in early access. This page describes how the platform is designed. Certifications, third-party audits and a responsible disclosure address will be listed here when they exist. For how deployment affects where your data lives, see deployment.
Early access
Give your agents a budget, a sandbox and a supervisor.
Heighliner is in early access. Join the waitlist and we will reach out as places open.