Company

Thesis

The category question is whether identity infrastructure should still depend on stored secrets in an agent-scale world. ENI6MA's answer: remove the reusable secret at the authentication boundary; keep the proof; keep AuthZ.

Book a live demo Try the Proof

The failure mode

Reusable credentials — passwords, API keys, long-lived bearers — treat possession of a copyable string as lasting capability. Hashing and vaulting raise the cost of theft; they do not change the model. Phishing, dumps, and agent sprawl exploit the same flaw: authentication that depends on a reusable secret surviving outside the ceremony.

The mechanism

ENI6MA relocates identity into a content-addressed verifier (digest-pinned circuit artifact) and relocates access into a one-shot, nonce-bound proof of knowledge. The verifier observes pass or fail for that challenge without taking custody of secret material outside the defined protocol. A stolen proof is useless on the next challenge.

Coexistence

Replace authentication at the secret-matching seam. Leave authorization, RBAC, and your gateway path intact. Same ceremony model for humans and machine principals. Deployment is a spectrum: local verify and cache, hosted executor, air-gapped self-host, or one-shot metered validation.

Land and expand

Turn on one surface, one tenant, one high-risk action, or one agent fleet. Progressive trust escalates from metered first contact to hosted validation to local cache against the same pinned digest. Config stacks (BYOI, org twin, dual XOR, sovereign, agent, wallet) are entry points — not forks of the protocol.

Circuit Authority

Bindings tie identity to digest over time with proof-gated rotation. On first contact, never trust a client-supplied digest alone. Golden rule: digest mismatch fails closed. A missing artifact is availability; a digest mismatch is integrity.

What we productize

Gate, Foundry, Control, and Verify — the ceremony stack enterprises adopt without rewriting authorization. Next step for diligence: proof-path review and a scoped pilot where a stolen string today still equals a stolen capability.