Strong authentication
Use passkeys, MFA, session controls, and device assurance.
Platform security
Security controls designed for explicit trust.
Evaluate identity, session, device, agent, tool, and action context instead of relying on implicit network trust.
Purpose-built capabilities
What Platform security covers.
Tenant isolation
Bind every owned object and decision to a tenant boundary.
Credential protection
Broker scoped credentials without exposing reusable secrets to agents.
Immutable evidence
Hash-chain security-relevant audit events for tamper evidence.
Follow Platform security from identity to evidence.
Each consequential action moves through the same six control points. See where 2AYE evaluates authority, requests human review, and preserves the outcome.
- 01IdentityWho or what is acting
- 02IntentSigned purpose and limits
- 03PolicyDeterministic evaluation
- 04ApprovalA named human when required
- 05ExecutionSingle-use grant, redeemed at the resource
- 06EvidenceReceipt joined to the audit chain
What this includes
- Passkeys, MFA, sessions and device posture
- Tenant isolation
- Hash-chained audit
- Published grant signing keys
- Signed audit egress to a SIEM or webhook, push or pull