Keydris

Keydris evaluates the authority assigned to this agent when it reaches a governed action.

01 Register the agent, assign a policy In the console, register the agent and assign it the policy you authored. You get an Agent ID.

02 Install the CLI Use Node.js 20+ on Windows, macOS, or Linux. npm installs the matching native binary.

03 Initialize the harness Connect the Agent ID, write the harness settings, and sign in when prompted.

04 Start and check the proxy Start the background proxy, then check identity, policy scope, and harness wiring.

05 Run the agent A session starts, Keydris issues a short-lived KIT, and each governed action is checked against the policy before it executes.

You integrate Keydris at the boundary that is about to carry out the action. That boundary obtains the authority decision and enforces it. Keydris supplies the decision; it is not the thing that executes.

Keydris governs the paths where your application requires Keydris authority. It supplies the decision; your boundary enforces it; your tool executes. The request payload stays on the execution path. A path that does not present Keydris authority reaches the tool through your application’s own authorization. Keydris is not a network firewall.