runs in your browserN-role quorum · Glass-Box chainApache-2.0 · zero-dep

One agent shouldn't decide in a vacuum.

Four-eyes is two parties. A jury is N roles: a custom deal must clear Risk, then Legal, then Compliance — each signed by a distinct authorized reviewer, in order — before the human gate. A single authorized veto blocks the whole chain; an unauthorized voice or the maker's own vote simply doesn't count. The verdict plus the ordered, signed chain are the Glass-Box audit trail.

Verdict (live)
cleared roles
pending roles
vetoed by
digest

Honest scope. A deterministic quorum gate — it decides whether the collected reviews satisfy the policy (every required role cleared by a distinct authorized reviewer, in order if an order is set); it does not perform the risk/legal analysis itself (that's each specialist agent's job — the jury governs and records their verdicts). It's the N-role generalization of four-eyes and the human-clearance layer the yield guard escalates into. FAIL-CLOSED — an unauthorized reviewer, the maker reviewing their own action, an unknown verdict, or a missing timestamp in an ordered chain never produces approved. Source: flowdesk-jury-kernel.js.