Intramedial is in restricted beta. At sign up or sign in, you have to provide the beta tester password you received or request one at preview@intramedial.com. Thank you.
Loading…
Require two people for an action
Open a dual-control request for a fixed scope, have a second administrator approve its digest, then run the gated action.
3 stepscurlJavaScriptPython
dual.control-scopes
Intralock · Leases · Parley · Fleet Map
A Trustvice Product
Agents act when the plane says yes, and the record says why.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
Some actions, such as revoking a tenant, should need two administrators. One opens a request with the exact body; a second approves its digest, and the gated route then runs only with that warrant.
Two signed-in administrators, the approving one with MFA within the last 12 hours
The exact body of the action to gate
The code reads the key from INTRAMEDIAL_KEY. Keep it in your shell or your secret store, never in a file you commit. Calls that need a signed-in person cannot use a key: the console makes them.
03
Walkthrough
Steps
1
List the eight scopes
Eight scopes are fixed in code. The read returns them with the state of the seal and the number of open requests. Any other scope is refused.
04
Evidence
What the record shows
✓It shows
A second administrator approved the digest of this exact body.
While the seal is intact, nothing bypasses the gate.
One administrator names the scope and the exact body of the action. The digest covers that body, so a second administrator approves precisely what they read. The request stays open for 15 minutes unless ttlMs says otherwise, and the call returns request and digest.
That the two administrators are independent of each other.
That the kill-switch scope is gated: no route checks it.
The ledger is append-only and sealed under Merkle roots. The time on an entry is Intramedial's own clock, and a signed bundle can be checked offline with the published key.
A Trustvice Product
