Trust
An agent with the standing ability to change things in your business only works if the limits are obvious. Here they are, in the same plain English the incident reports use.
Self-hosted Payloads stay put Policy-gated actions Full audit narrative
01 · Where it runs
The autopilot deploys the same way every Auth Alien system does: in your stack, on your infrastructure, under your network rules.
self-hosted by default
It sits where your integrations already live. There is no third-party hop for your business data to make on its way between two of your own systems.
secret store, your side
API keys and tokens are read from the secret store you already run. The agent uses them where they are; it does not copy them somewhere else to be convenient.
no exceptions requested
Egress stays whatever you have decided it is. If a connection is not allowed to leave your network today, deploying the autopilot does not change that.
02 · What moves
To detect drift the agent needs to know the shape of what passes through: field names, types, nesting, how often data arrives and how long a call took. That is what a fingerprint is.
It does not need to keep the values, and it does not. Payload contents live inside your boundary for as long as the buffer holds them, and are discarded on the retention window you set.
operational metadata
Field names and types, error codes, latencies, delivery counts, credential expiry dates, and the narrative of every incident.
replay buffer, your side
Raw events, so a failed delivery can be replayed. The window is yours to set — hours or days — and it expires on schedule whether or not anything went wrong.
non-negotiable
Your customers' records as a dataset. Nothing that passes through is retained for training, benchmarking or analysis of any kind.
03 · Approval
Every action the agent can take is classified before it is allowed: fix it now, ask first, or stop and escalate. You write that policy, and you can change it in a sentence.
readable, not just exportable
Every action taken, every action refused and every approval requested is written down in the same plain English as the incident reports, with a timestamp, the policy rule that governed it, and what it cost. Exportable, but the point is that you can read it without a query language.
always yours
Healing can be paused per connection or entirely, at any time, without stopping the watching. The agent keeps telling you what is wrong; it simply stops fixing it.
04 · What it costs
Probes, fingerprints, baselines and the weekly brief cost nothing — an agent that bills you for looking has the wrong incentive. The meter only moves when something is healed or a flow actually runs.
The billing philosophy behind that belongs to the platform, not to this page, and it is the same one every Auth Alien system is priced on.
Part of the Auth Alien platform
