Execution governance for AI agents: verify authority before actions affect real systems.
Project details
VERITAS OS is a control plane for AI agent execution. It separates model decisions from permission to act, rechecks policy and authority at the execution boundary, and records verifiable outcomes. Built for teams connecting AI agents to sensitive APIs and workflows. Controlled proofs exist; real customer deployment and independent validation are next.
VERITAS OS
Execution Governance for Autonomous AI Agents
The Problem
AI agents are evolving from generating information to performing real-world actions: modifying permissions, accessing sensitive data, updating business systems, and executing high-impact workflows.
As their capabilities expand, a critical question emerges:
Who has the authority to let an AI agent act—and how can that authority be verified at execution time?
Traditional prompt guardrails focus primarily on AI inputs and outputs. Identity and policy systems manage access permissions.
But authorization issued earlier does not necessarily establish permission at the moment an external action occurs.
An approval may be revoked. A policy may change. A target may differ from the authorized request. An external operation may complete even when its response is lost.
These are execution-governance challenges.
Our Solution
VERITAS OS is a deterministic execution-governance control plane designed to separate AI-generated decisions from real-world execution authority.
Its foundational principle is:
AI Intelligence ≠ Execution Authority
VERITAS treats AI-generated tool calls as proposed actions, not automatic permission to execute them.
The architecture introduces explicit governance and execution boundaries between the agent and the external system.
Core Capabilities
Evaluate policy, authority evidence, action context, and required human approval before permitting sensitive operations.
Revalidate relevant execution conditions before covered external effects, including controls for single-use authorization consumption.
Refuse execution when required authority, evidence, or policy conditions are missing, invalid, or inconsistent.
Distinguish successful execution, refusal, and uncertain outcomes. Avoid unsafe retries when an external operation’s completion cannot be established.
Preserve decision lineage, execution receipts, and reviewable evidence that can support debugging, technical verification, and governance oversight.
Differentiation
VERITAS is not intended to replace AI models, IAM systems, policy engines, or workflow orchestration platforms.
Its focus is the connection between them:
Governing the transition from an AI decision to a real-world effect, including the handling of uncertain execution outcomes.
This goes beyond evaluating whether an AI-generated response is acceptable.
It addresses whether a specific proposed operation has valid execution authority at the point where the external effect can occur.
Current Technical Status
VERITAS OS includes a Python-based governance runtime, APIs, reference integrations, PostgreSQL-backed evidence paths, and operator-facing review capabilities.
The project also provides reproducible controlled end-to-end tests, bounded security verification materials, and an AgentDojo-based security benchmarking project.
These provide concrete engineering evidence for technical evaluation.
However, controlled tests are not equivalent to independent production certification. Broader enterprise integrations, customer-environment validation, and further security-versus-utility optimization remain ongoing objectives.
Potential Applications
VERITAS is being developed for high-impact AI agent workflows such as:
Current Direction
The next objective is to validate bounded, high-risk execution workflows with independent technical reviewers and potential enterprise integration partners.
The goal is to demonstrate measurable improvements in execution control and auditability without unnecessarily blocking legitimate operations.
We are open to technical evaluations, scoped enterprise pilot discussions, and strategic integration partnerships.
Explore VERITAS OS
Core implementation and documentation
https://github.com/veritasfuji-japan/veritas_os
Technical evaluation and collaboration
https://github.com/veritasfuji-japan/veritas_os/issues/new/choose
VERITAS OS — AI decisions are not execution authority.
Comments
1Modern LLM agents still behave like black boxes — great at generating answers, but opaque in why decisions were made.
With VERITAS OS I’m trying to solve exactly this: a deterministic, auditable decision pipeline where every reasoning step, safety check, and world-state update is logged and inspectable.
The goal is not “another agent framework”, but a transparent alternative where reasoning is traceable, safe, and reproducible — something I always wished existing LLM agents had.
Feedback or suggestions from AGI / agent researchers would be incredibly helpful.