Multi-layer agent security starts in the database
A worker agent proposes. The Red Team critiques, Grok first and then Gemini. The Advisor rules and writes down why. The CFO confirms anything at or above Materiality. Under all of it, SpacetimeDB reducers check every caller’s identity, so no prompt can talk its way into the ledger. The feeds can only add raw bank lines and invoices.
The gate checks who is calling. A worker agent that tries to post to the ledger is refused, whatever its prompt says; only the Advisor, below your threshold, and you, above it, get a Proposal posted.
- 01
Worker agents propose
Bookkeeper, Revenue, Credit & Risk. Each signs in as its own role. They propose, never post.
- 02
Red Team critiques
Grok attacks each Proposal first, then Gemini adds what that critique missed.
- 03
Advisor rules
Approves or rejects every Proposal and writes down the rationale.
- 04
CFO confirms
Anything at or above Materiality waits for the CFO, a seat claimed with a one-time secret.
- 05
SpacetimeDB reducers check identity
Every write checks who is calling. An agent that ignores its prompt still cannot post.
- 06
Ledger
Journal Lines, Proposals and the audit trail, streamed to the app as they change.
