- CONTRACT
- compute-travel-expense-pre-approval
- VERSION
- v3
- ISSUED
- 2026-05-12 14:32:07 UTC
- SEALED BY
- ⌃ Sarah Chen · Finance
- RECEIPT
- rcpt_3f7a92b8e4c1
- ROOT
- 0x4e2a...b71c
AI for work that
actually matters.
Every reply your company’s AI gives is backed by a Contract a human signed. Expense approvals. Vendor risk. Customer requests. Policy Q&A. The LLM cannot answer without invoking a Contract — and every invocation leaves a cryptographic Receipt of Record.
Verify offline → curl ctrlai.com/api/receipts/rcpt_3f7a92b8e4c1
Three primitives. One signed unit.
LLMs guess. RAG paraphrases. Ctrl AI answers from typed Contracts your humans signed — every reply, every action, every time. Hallucination is not mitigated; it is structurally impossible.
Contracts
Typed callable functions signed by humans. Input schema. Output schema. Post-conditions. The LLM picks a Contract and calls it — it does not invent behaviour from prose.
Missions
Standing directives with success criteria. Auto-evaluated as Contracts run. The agent has commitments, not just answers.
Cases
Durable working memory with an append-only event log. A multi-week decision is a single Case with every signed action attached.
Every reply, a signed Contract. Every action, a Receipt.
The work your team does every day — approvals, reviews, decisions — becomes typed Contracts a human signs. The LLM has one job: pick the right Contract and call it. It cannot reply any other way.
Your workflow isn’t here? Contracts are typed callable functions — anything a human team handles on a checklist becomes one. Tell us about yours.
Every action leaves a Receipt of Record.
On every invocation we sign the inputs, outputs, signers, and trust level with an Ed25519 key, then append the digest to a chained-hash transparency log. Any counterparty — your auditor, your customer, your regulator — can verify the receipt offline with one curl and one signature check.
# Verify any Ctrl AI receipt offline curl -s https://ctrlai.com/api/receipts/rcpt_3f7a92b8e4c1 \ | jq '.receipt' > receipt.json # Fetch the public signing key curl -s https://ctrlai.com/.well-known/ctrlai/receipt-keys \ > keys.json # Verify the Ed25519 signature node verify.js receipt.json keys.json # → SEALED · entry #1,847 · root 0x4e2a...b71c ✓
No SDK required · No vendor lock · Cryptographic, not theatrical
Five surfaces. One frame.
- §4·1
Compliance Packs
Install expert-co-signed bundles of typed Contracts. EU AI Act Starter, DORA AI Risk, B2B SaaS Rev-Ops.
- §4·2
Approval Inbox
Daily triage of gates pending sign-off, Contracts past review, expired Contracts, stale Mission criteria, proposals from Coverage.
- §4·3
Mission Control Room
Visualize a Mission's typed executor plan walking step by step. Auto-advance, gates surface inline, every step receipt-anchored.
- §4·4
Trust Portal
Public, cryptographically verifiable record of every signed Contract invocation. Pin the root hash; verify offline.
PlusCursor, ChatGPT, Slack AI, and your CI route through Ctrl AI via MCP. Same Contracts, same Receipts, same enforcement — wherever your team works.
You don’t author governance. You install it.
Expert-co-signed bundles of typed Contracts targeted at a regulation and a vertical. Install in five minutes. Inherit the jurisdiction tags, the clause mappings, the expert signatures.
Three tiers. Plain numbers.
Free
Two users. One workspace. The full primitive set, no caps.
- —Up to 2 seats
- —Unlimited Contracts
- —Receipts of Record
- —Public Trust Portal
Team
One installed Pack. Up to 25 seats. SSO and audit export.
- —1 Compliance Pack
- —Up to 25 seats
- —SSO + SAML
- —Quarterly audit binder
Enterprise
Multi-Pack. Unlimited seats. Custom signers. Dedicated transparency log retention.
- —Unlimited Packs
- —Unlimited seats
- —Custom Pack co-signing
- —Air-gapped or self-hosted option
The Contract is signed.
The Receipt is the proof.
Expense approvals. Vendor risk. Customer requests. The work your team actually does — every reply backed by a Contract a human signed, every action sealed in a Receipt your auditor can verify.