CipherQuay
← Legal Centre

CIPHERQUAY · LEGAL

Responsible AI and Automated Systems Policy

CipherQuay’s approach to authority, oversight and consequential machine action.

DRAFT FOR REVIEW · 3 OCTOBER 2026 · VERSION 2026-10-03-DRAFT-1

This CipherQuay-specific draft requires operator and legal review before being treated as an approved policy or contractual commitment. Visiting this page does not execute an enterprise agreement.

Capability is not authority

CipherQuay is Enterprise Machine Authority: an independent, model-agnostic control plane for delegated machine authority. A machine's ability to perform an action is not, by itself, permission to do so.

Explicit boundaries and oversight

Every consequential machine action should have an identity, an accountable sponsor, a declared purpose, an explicit boundary, an enforceable decision, a defensible record and a practical means of interruption. Enforcement must sit outside the system being constrained wherever technically possible.

Deterministic decisions and least authority

The engineering principles favour versioned, typed and reproducible policy contracts, fail-closed decisions and narrow, time-bound delegation. Model prompts, alignment and self-reported reasoning are inputs, not the sole control boundary. AI assistance does not own the final enforcement decision.

Current limitations

These are product and engineering principles, not a claim of completed production controls. CipherQuay is in private enterprise preview. The public staging workspace is synthetic and does not perform external actions. Independent safeguards and accountable human judgement remain necessary.