Interactive demo
Pick an industry. Watch an agent get told no.
Each sandbox boots a fully populated Interlok org in your browser — a live policy, a decision log, a pending approval queue and a hash-chained ledger. One API call stands between the agent and the thing it can't take back: irreversible actions hold, a named human determines, and the proof is signed. The engines are the production ones — same tiering, same policy evaluation, same hash chain. Only the outside world is simulated. No account, no data leaves the tab.
Fintech / payments
A support agent that can move money
Northgate Payments
Live Stripe key in plaintext and create_refund auto-approved — the agent can issue refunds with no human in the loop.
Grade
F
Policies
6
On hold
2
Payouts are denied outright — money that leaves can't be pulled back. Refunds over $1,000 hold for a named human's signed determination.
Open demoDevOps / platform
A coding agent that can drop production
Halyard Infrastructure
delete_repo is reachable, an unbounded shell is one tool call away, and an IAM server can grant the agent more privilege than its owner has.
Grade
F
Policies
6
On hold
2
Repo deletion and shell access are denied outright. Merges to main and IAM grants hold until a named human signs.
Open demoE-commerce / retail
A pricing agent that can email 74,000 customers
Vera & Co.
Bulk repricing and campaign sends are auto-approved — one bad prompt reprices 12,000 SKUs and announces it to the entire winback list. An email cannot be unsent.
Grade
F
Policies
6
On hold
2
Bulk repricing above the blast-radius threshold holds for a merchandiser. Customer-facing sends always hold for a human.
Open demoHealthcare
A clinical scribe that can disclose a chart
Fairmount Health Network
The scribe can write to the EHR and fax patient records outbound. A disclosure cannot be recalled once it leaves — and it is reportable.
Grade
F
Policies
6
On hold
2
Outbound PHI disclosure is denied outright. Chart amendments hold for the responsible clinician's signed determination.
Open demoIndustrial / OT
A maintenance planner that can actuate a plant
Hartwell Industrial Operations
The planner can reach PLC setpoints, firmware and interlock controls. In an OT environment a wrong write is not a bad row — it is a safety event you cannot roll back.
Grade
F
Policies
6
On hold
2
Setpoint writes hold for a control-room operator. Interlock bypasses and firmware pushes are denied outright — no human can approve them through an agent.
Open demo