Control path
The model can propose an action. It is never the authorization authority.
Vaqri separates intelligence from permission so organizations can govern AI and human device actions on supported controlled paths.
Request a private briefing- 01
Normalize intent
An AI or human proposes a device action. The request is normalized before policy evaluation.
- 02
Evaluate deterministically
Ritqo evaluates identity, workload, device capability, current state, policy, risk, approval, expiry, nonce, replay, and provenance.
- 03
Issue or refuse
The result is a signed, versioned envelope within policy bounds, or a deterministic, explainable denial.
- 04
Re-verify at the gateway
Action Shield re-verifies the envelope and cached policy before a supported MQTT path forwards anything to the unchanged legacy device.
- 05
Observe and retain evidence
Telemetry, Vaqri Proof evidence, canary controls, pause signals, and rollback processes preserve the operational record.
Vaqri protects supported controlled paths. It does not claim to repair every device firmware flaw or stop every possible attack.