Railpane is authorization, runtime security, identity, and governance infrastructure for autonomous AI agents — coding, DevOps, MCP, infrastructure, financial, browser, and support agents.
Pilots are capped cohorts. Leave your work email and we will reach out when your use case opens — starting with coding and DevOps agents.
No spam. One email when pilots open, one when generally available. Unsubscribe anytime.
Every consequential action passes through identity, delegated authority, policy, approval, guarded execution, and tamper-evident receipts:
ALLOWDENYREQUIRE_APPROVALALLOW_WITH_CONSTRAINTS
Railpane is not an LLM, a chat UI, a coding agent, a generic agent framework, an orchestrator, a mere observability dashboard, or a wrapper script. The commercial value is the central trust/control plane connecting the open-source engines.
Deterministic policy before probabilistic judgment. LLM output never silently overrides DENY. Fail closed.
Railpane is built on mature open-source components with distinct responsibilities. Each stays useful standalone. Railpane is the control plane that connects them.
Identity, principals, orgs, ALLOW/DENY/REQUIRE_APPROVAL, transactions, saga compensation, MCP proxy, receipts, Postgres.
Docs & usage →Command gate, filesystem/network/binary policy, Landlock/seccomp sandbox, fail-closed. Exits 0 allow, 2 deny, 1 broken.
Docs & usage →Git diff analysis, symbol changes, importance scoring, task-vs-change verification, CI gates. Deterministic, evidence-first.
Docs & usage →Flight recorder for agent runs: observed changes, content-addressed versions, diffs, rewind, portable bundles.
Docs & usage →One seal.toml compiles to Annalist + Paldron policies so they cannot drift apart. Stamp + verify receipts.
Docs & usage →Tasks → isolated git worktrees → one-command runners → changesets → overlap checks → approve/integrate.
Docs & usage →Reeve → reference agent / test client (not Railpane). Full docs →
Task: "Increase session timeout from 30 to 60 minutes."
Paldron, Rift, Annalist, Seal, SettleAgent local runtime, Ballast local orchestration, SDKs/protocols. No crippling.
Orgs, fleet, identity, delegation, credential broker, policy distribution/inheritance/rollback/simulation, central approvals (Slack/Teams), SSO/OIDC/SCIM, signed provenance, SIEM, retention, compliance exports, MCP gateway, hosted plane, anomaly detection, SLA.
Design partners: tell us what your agents spend and touch. If it is a fit, first governed action live within two weeks.