drills.counterfactualModule 34Ask what a policy change would do before you make it: re-run chosen requests with grants dropped or added, and see each answer change.
drills.counterfactual evaluates probe requests twice with Intralock: against the live policy snapshot, and against a copy with grants dropped, grants added or leases cleared. Each probe returns before and after. No model runs, and no grant, lease or mandate changes.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuse
Plane module
packIdpack_counterfactual drops the grant g-house and probes did:a reading repo:main.grantIdsgrantId names a single one./docs/drills-counterfactualAPI referenceRoutes, bodies and status codes./docs/drills-counterfactualOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/simulationStart freeCreate a workspace and admit your first intent./auth/signup
addGrantsprincipal, action, resource and an optional id.dropLeasestrue clears the leases on the probed resources in the copy.dropLeaseResourcesprobesactorDid or principal, resource, action and an optional nowMs.beforeallow, or a refusal with reason and detail.afterresult repeats it.droppedIdsadded lists the ids of the grants added.forceInlineSend probes, or one request as actorDid, resource and action. With none, the default probe is did:a reading repo:main, the one in the stock pack.
Name grantIds to drop, addGrants to add, and dropLeases or dropLeaseResources to clear leases. A packId loads a stored scenario, and pack_counterfactual is built in.
Each probe is evaluated against the current snapshot and against the changed copy. A hypothetical grant that would form a cycle is skipped, not treated as an error.
The response is stored as the workspace's last counterfactual drill. Grants, leases and mandates stay as they were.
With a drill workflow bound and no forceInline, the workflow takes the job and the response is queued: true with a workflowId.
This module's calls change real state or reach outside services, so the shared demo does not run them. Sign in to run it in your own workspace. drills.counterfactual docs
This module's calls change real state or reach outside services, so the shared demo does not run them. Sign in to run it in your own workspace.
A request in the shape the API accepts, and an example response in the shape the module returns.
POST /api/v1/acp/drills/counterfactual Authorization: Bearer av_workspace_•••• Content-Type: application/json { "packId": "pack_counterfactual" } → 200 { packId, probes, before, after, result, llm }
{
"packId": "pack_counterfactual",
"dropped": "g-house",
"droppedIds": [
"g-house"
],
"added": [],
"probes": [
{
"probe": {
"principal": "did:a",
"resource": "repo:main",
"action": "read",
"nowMs": 1793523600000
},
"before": {
"allow": true,
"grantId": "g-house",
"protectedClass": "none"
},
"after": {
"allow": ,
: ,
:
}
}
],
: {
: ,
: ,
:
},
: {
: ,
: ,
:
},
: {
: ,
: ,
:
},
:
}Before dropping g-house, probe the agents that use it. Each after shows whether the agent still has a grant or would be refused with no_grant.
Add a narrower grant and drop the wildcard in the same scenario, then probe the resources you meant to keep.
Clear the leases on a resource in the copy to see whether a refusal was lease_held or a missing grant.
Attach the stored drill, with its before and after for each probe, to the change request that retires the grant.
ledger.blame.mandates.compile.drills.frt runs the fixed reference scenarios.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
after is what admission will answer. Admission also applies quarantine, stop switches and the confirmation floor, which this check skips.allow: true carries a grantId and a protectedClass. A refusal carries one of no_grant, lease_held, protected_class, cycle or stampede, with a detail.
pack_counterfactual drops g-house and probes did:a reading repo:main. Packs from the registry can carry dropGrantIds, addGrants, dropLeaseResources and probes the same way.
Running a counterfactual needs policies.propose, as every drill does.
counterfactual drill. A new run replaces it.packId the registry cannot find loads nothing, and the request runs on the fields you sent.before, after and result describe the first probe; read probes for the rest.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/drills/counterfactualEvaluate probes before and after a hypothetical change.coordination.drills.counterfactualEvaluate probes before and after a change as an MCP action.mandates.compile03Mandate studio and replayWrite an agent's charter as code, see what it would change about who may do what, and apply it as the mandate's next version.drills.frt35Turf-war drillsCheck on demand, or on a cadence you set, that the kernel's core guarantees still hold, and keep a scorecard of every run.conflict-audit.latest33Conflict audit reportRead the latest conflict audit: where agents contended, how well the record backs it, and which resources are ready to move from observe to enforce.detection.run07Conflict detectionTurn contention between agents into a filed case with the evidence attached, instead of an alert nobody can answer.watchdog.check36Issuance watchdogCatch a plane that is issuing leases or credentials too fast, or has gone quiet, by reading the ledger instead of asking the plane.conformity.sweep37SI/AI disclosure conformityFind which agents may speak to a person without a disclosure label before an authority does, and test a fleet change before you make it.