An operating system for organizations that run on agents.
Vagaris runs a standing organization of AI agents against real infrastructure. The hard part was never getting an agent to act. It was deciding what an agent may do without asking, and proving afterwards that it stayed inside that boundary.
Propose, gate, act
Autonomy is not a switch. Each action an agent wants to take is separated into three moments, and the middle one is where a human still decides.
Propose
An agent reaches a conclusion and writes down the action it wants. Most seats never leave this tier — proposing is all they can do.
Gate
Anything consequential is a keystone decision and needs a human-borne credential. An agent cannot approve its own work, and cannot approve another agent's.
Act
The approved action passes an authorization seam that re-checks scope, verb and expiry at the moment of execution — not at the moment of approval.
What it refuses to do
A system that only describes what it can do tells you nothing about what happens on a bad day. These are the refusals, and they are enforced in the execution path rather than documented as intent.
- arming expires
- Permission to act carries an expiry. When it lapses the seam refuses, and the refusal is the default — nothing has to be remembered or revoked by hand.
- verb denylist
- Named actions can be withheld from a seat outright. A malformed rule fails closed for that seat rather than silently widening it.
- scope limits
- A seat acts only inside the domains it was granted. Scope is re-read at execution, so narrowing it takes effect immediately.
- append-only record
- The event log is the source of truth and is never edited in place. What is rendered for humans to read is a projection of it, not the record itself.
- delivery, not hope
- Work that must reach another system is written to an outbox and retried until it is accepted. A transport failure delays delivery; it does not lose it.
Request access
Vagaris is pre-GA and available privately. There is no self-serve signup, and that is deliberate: the product runs against live infrastructure, so access starts with a conversation about what you would point it at.
admin@vagarylabs.com →Tell us the organization and what you would put under it. Pricing is not published because it is not set — this is a pre-GA product, and quoting a number we have not decided would be worth less than saying so.