See PlanVault in action
A governed refund agent running against a live payments API. The plan comes from whichever model you choose — a cloud provider or a fully self-hosted local model (this recording uses a self-hosted Falcon-H1). The guarantees come from the runtime, not the model.
Plan with any model
OpenAIAnthropicGoogle GeminiMistralSelf-hosted: Falcon · Llama · Qwen100+ providers via LiteLLM
What you'll see
The agent decides a $12,450 refund is justified — and the runtime holds it at a human approval gate. Policy the model cannot override.
A $180 refund in the same session completes automatically — the gate is a rule, not a blanket.
Secrets never reach the model; every step is recorded and replayable.
Put the same gate in front of your agents
Self-hosted in your VPC, connected to your own APIs, planned by the model you already use.
MeanwhileDocsSecurityIntegration examples