CIPHERQUAY · LEGAL
Responsible AI and Automated Systems Policy
CipherQuay’s approach to authority, oversight and consequential machine action.
DRAFT FOR REVIEW · 3 OCTOBER 2026 · VERSION 2026-10-03-DRAFT-1
This CipherQuay-specific draft requires operator and legal review before being treated as an approved policy or contractual commitment. Visiting this page does not execute an enterprise agreement.
Capability is not authority
CipherQuay is Enterprise Machine Authority: an independent, model-agnostic control plane for delegated machine authority. A machine's ability to perform an action is not, by itself, permission to do so.
Explicit boundaries and oversight
Every consequential machine action should have an identity, an accountable sponsor, a declared purpose, an explicit boundary, an enforceable decision, a defensible record and a practical means of interruption. Enforcement must sit outside the system being constrained wherever technically possible.
Deterministic decisions and least authority
The engineering principles favour versioned, typed and reproducible policy contracts, fail-closed decisions and narrow, time-bound delegation. Model prompts, alignment and self-reported reasoning are inputs, not the sole control boundary. AI assistance does not own the final enforcement decision.
Current limitations
These are product and engineering principles, not a claim of completed production controls. CipherQuay is in private enterprise preview. The public staging workspace is synthetic and does not perform external actions. Independent safeguards and accountable human judgement remain necessary.
