In production

Governing a real fleet, catching real attacks.

Signet runs in production at Lavish Gains across a fleet of autonomous agents, gating real actions against real mandates every day. These are events from the live ledger, not a staged demo.

Secret interception

Blocked at the boundary

An autonomous coding agent attempted to write a live API key into a source file. Signet denied it at the tool boundary before any commit, and sealed the denial to the ledger.

Manufactured consent

Authority is recomputed, not claimed

An agent claimed a teammate had approved an action. Signet refused, because authority is computed from the sealed record, never accepted from a claim in the conversation.

Budget runaway

Caught over the cap

In one anomaly session the gate watched an agent run many times over its daily cap, flagged by configuration and held to its budget, with every attempt on the record.

Independent validation

Public benchmarks, reported straight.

Signet is measured on the agent-security benchmarks the field publishes on. We report the trade honestly: the attack cut, and what it costs legitimate work.

AgentDojo, prompt-injection hijack

Attack driven to near zero

Across the hijack suites, injected-attack success falls from as high as 94% to near zero, with every block recorded in the ledger, while the agent still completes its legitimate work.

Agent Security Bench

Every injected attack refused

On direct prompt injection, zero of one thousand injected attacks succeeded, every injected tool denied and every legitimate tool allowed.

AgentDyn, dynamic frontier

A corner no published defense holds

Signet lands in the low-attack, high-utility region that plan-locked academic defenses collapse out of: attack at the floor while keeping most of the clean-task ceiling.

Latency

Microseconds, measured

On tens of thousands of real sealed decisions, the gate decides at a median of about two microseconds, with no model in the path.

Benchmarks are self-run on third-party suites, on a model matched to the published field, and the trade is reported honestly: the attack cut, and what it costs legitimate work.

Measured, not asserted.