Enforcement plane
ENI6MA Gate
BetaThe flagship. Gate replaces reusable credentials at the request boundary with one-shot, request-bound proofs. Four form factors: reverse proxy and SDK in Beta, MCP wrapper as a Demo, sidecar on the Roadmap.
What Gate enforces
PKI and tokens prove who may speak for a while. Gate envelopes prove that this message may change the world once.
ENI6MA Gate is the enforcement plane: it runs the eight-stage check order at the request boundary before application logic executes.Shippinggateway-service challenge/invoke path and DEMO-HACK news-server middleware.
Each protected route carries its own policy: endpoint_id, policy_hash, method allow-list, TTL, and use count.ShippingPer-route Gate configuration surface on proxy and SDK form factors.
Gate routes can run fail-closed (reject when Control is unreachable) or fail-open with an explicit break-glass path.ValidatedRoute-level fail mode and break-glass configuration on the Gate.
Gate audit capture supports hash_only and full-capture modes per route.ValidatedAudit mode configuration on protected endpoints.
Guarantees assume the reference architecture.
Form factors
Terminate proof in front of an existing service. No application change: the gate runs the check order and forwards only what survives it.
Reverse proxy in detailEight-stage check order
Fixed sequence on every untrusted request. Burn happens before validation.
- Recompute the request hash
- Check endpoint and policy
- Confirm the circuit is active
- Check freshness
- Burn the nonce
- Validate the proof
- Apply application policy
- Serve the request
Configuration surface
What a buyer configures per protected endpoint.
Per-endpoint policy
endpoint_id, policy_hash, method allow-list, TTL, and use count (scoped to the route being protected).
Freshness window
Tune how long an envelope remains valid for each route. Captured envelopes die when the window closes.
Fail-open vs fail-closed
Choose reject-when-Control-is-unreachable, or an explicit break-glass path for emergency access.
Audit mode
hash_only for compact evidence, or full capture when you need the complete request transcript.
Ready to protect an endpoint?
Proxy and SDK middleware are Beta. MCP is Demo. Sidecar is Roadmap: no purchase path until it ships.