TC360™ · AI Agent Control Plane

Write Intent in. Allow, Block, or Pause out.

Before an agent changes Salesforce or another system of record, Check Write decides. Allow may write. Block and Pause do not. Called gate: if the orchestrator skips the call, the write is not under TC Protect™.

Docs · Write Intent · Check Write · Salesforce Write Gate

See the write gate → Docs
Architecture

What happens on a wired path

  1. 01check_gate · Orchestrator starts a run. Kill switch Paused fails closed.
  2. 02check_write · Before mutate, emit Write Intent.
  3. 03Write to the system of record only on Allow
  4. 04Trace + dashboard · Pause / resume, metadata audit.
  5. 05Phase 2 · Slack / SIEM webhooks. Not live yet.
No MITM. TekCapitol does not sit in front of Salesforce or any system of record. Audit is metadata-first by default (decision, reason, auditId). Not raw prompts.
Check Write

Allow, Block, or Pause before every mutate

Call check_write (SDK: guardedWrite) before CRM, ERP, or tool side effects. Compare intended values to authority.

Every decision returns reason and auditId. Trace records Allow, Block, and Pause with the same metadata rigor. Stops are not thin logs.

Gate strength depends on the authority and freshness you emit. High-assurance wiring uses pause or block when data is stale or a required field is blank. Detail for integrators: Check Write design.

Trace · kill switch

Operators stay in control

Trace keeps the decision trail: agent / workflow ids, object ref, timestamps, policy tags. Kill switch modes: Active, Scope limited, Paused. When Paused, check_gate blocks new runs.

Hosted launch

From $750 / month per workflow

LAUNCH
$750/mo

Per workflow · TekCapitol-hosted · gate + audit.

PILOT / PRODUCTION / VPC
Scoped on call

Multi-workflow, private deploy, regulated environments.

Request TC Protect™ pricing

TC360™ also includes TC Diagnose™ and TC Fix™ when you still need a readiness map before production. That is optional. TC Protect™ is the live control plane when agents already write.

See the write gate

One tour. Then we talk about wiring a single mutate path if it fits.

See the write gate → Request pricing

Need a map first? TC Diagnose