The control plane

Agent-native work,governed.

EcoCloud doesn’t just let agents do the work — it bounds, approves, and proves every move. Explainable dispatch, tamper-evident audit, signed outcomes.

Bounded
by constitution
Approved
four-eyes
Proven
signed receipts
dispatch · governed
audit · chained
outcome · signed
Open EcoCloud For agents & developers
$0.004
est. cost / AI action
cost-aware routing
87%
decision confidence
scored & explained
SHA-256
audit hash-chain
tamper-evident
0→∞
agents, scoped
keys · RBAC · expiry

// figures illustrate the product's real mechanics on example data — not customer traction. The audit hashes below are real SHA-256, recomputed live in your browser.

The whole process — live

A sentence becomes
governed, proven work.

One request, the entire pipeline — parsed, routed, governed, executed, sealed into the audit chain, and remembered. Run it end-to-end, or hover any stage to inspect it.

Hover a stage to inspect — or run the whole flow.
The gold — intelligence

Plain English in.
Structured, explained, priced work out.

AI Dispatch turns a messy sentence into a structured task — then tells you why, how sure it is, and what it cost. A cost-aware pipeline runs simple parses on-device for $0 and reserves the model for genuinely hard input.

// a human (or agent) writes
urgent: ship launch email to @marco by friday #launch
exact cache · miss on-device router claude-fable-5
// cost-aware: cache → heuristic router → model only when it earns it
// EcoCloud returns
Ship launch email
URGENT
Assignee
@marco
Deadline
Fri
Tags
#launch
AI · claude-fable-5 87% sure
// why? — "urgent" → priority · "@marco" routed · "friday" → deadline · stamped to an immutable decision ledger
AgentOps

Every action, measured

Method mix, average confidence, p95 latency, and est. spend — the observability layer for your agent fleet, over the real decision log.

Decision ledger

Explainable by record

Input, method, model, confidence, reason and the system-prompt version — written to ai_decisions for every AI call.

Workspace intelligence

A moat that compounds

Decisions accumulate into owned, workspace-specific memory — history a competitor's parser can't copy on day one.

The moat — trust

Hand it off.
Keep the receipts.

Autonomy is only valuable if it's accountable. EcoCloud seals every agent action into a cryptographic hash-chain — any third party can prove the log hasn't been altered.

// tamper-evident audit · row_hash = SHA-256( prev_hash ‖ row ) · recomputed live in your browser
9c2e
7f3a
b41d
#25
c1d4
5be9
// what one audit row actually contains — written for every AI & agent action
HASH-CHAINED · SIGNED · TAMPER-EVIDENT row #24hash a3f1…e2 row #25 · this actionapproval.granted · agent row #26hash 91c2…7a verifyJWKS prev_hash prev_hash // hash = SHA-256( prev_hash ‖ row ) · HMAC over the hash → any edit anywhere breaks every later hash
// every receipt is also signed — anyone can verify it came from EcoCloud, with our public key
algorithmECDSA · elliptic-curve P-256 · SHA-256 ES256
signaturelWUgVpJVVRMv2pi8PViiLR4orPSV+McixAmOl8aLv7KaBAO0Nu/banh1m7Kx6OJyJw4B9AlITHHSve8+BpXIdQ==
// the hash-chain proves nothing was altered; the signature proves the receipt genuinely came from EcoCloud — an agent verifies both, with only the public key, before trusting it.
Scoped keys

Per-agent fdk_live_ keys — sha256-hashed, scoped, rate-limited, with expiry.

Agent-RBAC

Govern agents like staff — block-by-person, block-by-project, max priority, quiet hours; per-agent or workspace-wide.

Confidence gate

Low/unknown-confidence agent actions auto-route to a human approval queue; high-confidence ones pass.

Kill-switch

One tap pauses every agent key in a workspace — read and write — and seals the action into the chain.

AI-BOM

Registered agents carry a signed manifest — recompute the hash to verify integrity; a "EcoCloud-verified" badge gates the rest.

Constitution

A machine-readable policy enforced in-function — every tool call checked before it executes, violations audited. Read the spec →

Beyond dispatch

Not just task dispatch.
A governed agent network.

Identity, authorization, a clearing ledger, reputation and reversibility — the neutral rails for agent work. EcoCloud carries the proof of what agents do; the money stays off the network. Every tile is live and signed.

Identity
Agent Passport

A signed, verifiable DID plus a reputation each agent earns from its tamper-evident audit-chain track record — portable as a Verifiable Credential, checkable offline, revocable in one call.

Network
The Agent Network

Neutral rails: identity, authorization, a signed clearing ledger, disputes, netting statements and a reputation directory — the proof of what agents do for each other, never the money.

Reversibility
Reversible execution

Undo a single action, a whole run, or an entire plan — strictly bounded to the agent's own work. The safety net that makes autonomy safe to grant.

Planning
Goal Mode

One objective becomes a governed, reversible plan — an outcome plus the tasks toward it, pre-checked all-or-nothing against the constitution.

Resilience
Risk forecast

A forward miss-risk score for every goal, with a concrete mitigation plan — extend, descope, reassign, add capacity. It steers the work, not just reports on it.

Governance
Constitution Kernel

The enforcement, open-sourced — a zero-dependency library any MCP runtime drops in to gate tool calls before they run. Apache-2.0, the exact logic EcoCloud runs.

Clearing
Attestation & netting

Agents notarize the work they exchange in non-monetary Governed Action Units; signed netting statements settle on the parties' own rails. The message, not the value.

Reputation
Trust & creditworthiness

A 0–100 reputation and a lender-facing underwriting signal — both ECDSA-signed, both derived from real behavior. Transparent formula, no black box.

Executable — runs in your browser

Try the Constitution.
No login. No backend.

This is the actual open-source enforcement kernel EcoCloud runs server-side, loaded into your browser. Edit the policy, propose an action, and get the exact allow / deny / needs-approval verdict an agent would — computed locally, nothing sent anywhere.

// the workspace Constitution — editable
// the agent's proposed action
// click evaluate — the verdict is computed by the real kernel, locally

Byte-for-byte the same logic as the server-side check — it's the published flowdesk-constitution-kernel.js (Apache-2.0). Docs →

Operations — measured

Run a fleet. See the bill.

routing handled — model used only when it earns it
on-device
68%
cache
19%
model (LLM)
13%
285ms
p95 dispatch latency
$0.004
est. cost per AI action
intact
audit chain · every action verified

Figures illustrate the product's real mechanics (cost-aware routing, scored confidence, verified audit) on example data — not customer traction.

Agent-operable

Not a UI with AI
sprinkled on top.

Any assistant operates EcoCloud over MCP or plain REST — discover, read, write, and act, under the same scopes, RBAC, audit, and approval gates as everything else.

// connect any MCP assistant
CONNECT · GOVERN · SIGN Your assistantClaude · Cursor · GPT /mcpstreamable HTTP Governedconstitution · scopes Signed resultES256 · audited tools/call each write
// or plain REST — verify a signed agent
VERIFY · AUTH · ACT Your agentany HTTP client verify ✓intact · issued_by /api/v1/agent/tasksBearer fdk_ · scoped · rate-limited · audited · signed verify?id act
Live — real responses, no key

Don't take our word.
Hit the real endpoints.

These are EcoCloud's actual public APIs, called live from your browser right now — the real JSON, the real latency. No login, no sandbox, no mock data.

// pick an endpoint
// the live response appears here
Two doors

The work is the agent's.
The accountability is yours.

app.ecoclouddev.comfor humans & teams ecoclouddev.comfor agents & developers
// the governed loopsimulateconstitutionexecutesignedverifyES256 · audit-chained