The framework
Governed Autonomy, earned in four rungs
Authority is earned, not assumed. The canonical ladder — Evidence → Calibrated confidence → Gated authority → Full audit trail — is the same framework the platform is built on and the same one the Readiness Scorecard measures you against.
How an agent earns its scope substantiated
- Evidence Outputs link back to the data and reasoning behind them — no black-box assertions.
- Calibration Confidence is scored against real outcomes using Wilson confidence intervals.
- Graduation A state machine grants authority as an agent demonstrates reliability over time.
- Audit chain Decisions are written to hash-chained, replayable logs.
These mechanisms are described in detail on the Architecture page.
Human control
A human is always in command
Autonomy is a setting, not a default. Consequential actions pass through human-set gates, and a supreme kill-switch sits above the whole system.
Approval gates & authority levels substantiated
- Gated authority Authority is scoped by a graduation state machine and human-set guardrails — agents act only within the scope they have earned.
- Quadruple-gate Any real-money tier is protected by a quadruple-gate before an action can execute.
- Kill-switch A supreme capital kill-switch can halt anything that touches the real world, immediately.
- Escalation Low-confidence or out-of-scope requests are designed to defer to a human rather than guess.
Configurable. Which actions require approval, the number of approvers, and authority thresholds are set per deployment. Defaults are conservative: real-money and other consequential actions are gated until you explicitly widen scope.
Auditability
Every decision is replayable
If a partner, regulator, or your own risk team asks why an agent did something, you should be able to show them — not reconstruct a guess.
Decision logs & evidence chains substantiated
- Audit chain Hash-chained, replayable decision logs record what was decided and why.
- Evidence chain Each decision traces to the inputs, context, and reasoning that produced it.
- Structured traces Structured logging and full request tracing capture the path through the system.
- Observability Watchdog supervision monitors the running system.
Configurable. Log retention windows, export formats, and integration with your SIEM or observability stack are set per deployment.
Model governance
The right model, chosen on purpose
Model choice is configuration, not a hidden default. Each task is routed to the most cost-effective model that meets the quality bar for that job.
Routing, selection & fallback substantiated
- Heavy reasoning Frontier models for final synthesis and deep analysis.
- Everyday tasks Efficient hosted models for classification and routine generation.
- Local parsing On-device inference for lightweight extraction.
- Configuration Routing rules are declared as configuration, not buried in code.
Configurable / roadmap. Formal per-skill evaluation suites and automated model fallback policies are configured per deployment and continue to mature with each release. The exact model line-up is shared under NDA or in a technical walkthrough, because it changes between releases.
Data governance
Your data stays in your boundary
How your data is scoped, retained, and used is a decision you make — not a surprise buried in terms.
Boundaries, retention & training substantiated
- Access control Role-based access, hashed tokens, signed agent-to-agent calls, and skill allowlists govern what can touch data.
- Isolation Sandboxed execution in non-root containers limits blast radius.
- Self-hosting In a self-hosted deployment, data stays inside your own infrastructure.
Configurable. Client-scoped execution, data-retention windows, and tenant data boundaries are set per deployment — with multi-tenant isolation available on the Enterprise tier. Your content is not used to train third-party foundation models as part of normal operation; exact data-handling terms for managed and multi-tenant deployments are confirmed in your agreement. We do not publish compliance certifications we have not completed — request a security walkthrough for current status.
Risk governance
High-risk work gets extra brakes
The riskier the workflow, the more gates and human oversight it carries. Finance is treated as a capability and governance demonstration — never a performance promise.
High-risk controls & human-in-the-loop substantiated
- Gating Consequential actions are gated; real-money tiers carry the quadruple-gate and kill-switch.
- Human-in-the-loop A human approves or can halt high-risk actions at any time.
- Scoped authority Agents cannot act outside the authority they have earned and been granted.
Finance disclaimer. Trading and quantitative features run as a capability and governance demonstration on paper trading. Meta3Agents makes no trading-return, alpha, or performance claims anywhere on this site. Outputs are decision-support, not financial advice.
Prohibited uses. Meta3Agents is not for fully unattended control of consequential real-world actions without the gates above, for circumventing audit or kill-switch controls, or for any unlawful, deceptive, or rights-violating activity.
Deployment trust
Run it where you trust it
Trust starts with where the system runs. Choose the isolation model that fits your risk posture.
Self-hosted, managed & private cloud substantiated
- Self-hosted The full platform on your infrastructure, with all capabilities and your data inside your boundary.
- Managed Fully managed operations with monitoring and support, on infrastructure we run for you.
- Enterprise Multi-tenant isolation, private integrations, and dedicated engineering.
- Delivery Containerized deployment with CI/CD; TLS terminated by Caddy.
See deployment tiers on the Pricing section.
Straight answers
The questions buyers actually ask
Can it act without approval?
Not for consequential actions. Authority is gated by a graduation state machine and human-set guardrails, and real-money tiers carry a quadruple-gate plus a supreme kill-switch. Which actions require approval is configurable, and the defaults are conservative.
Can it access our data?
Only within the boundaries you set. Access is governed by role-based access control, hashed tokens, signed agent-to-agent calls, and skill allowlists, with sandboxed, non-root execution. Self-hosted deployments keep data inside your own infrastructure; client-scoped execution and retention are configured per deployment.
Can we review every decision?
Yes. Decisions are written to hash-chained, replayable audit logs with evidence chains and structured traces, so a decision from last month can be reconstructed and explained.
Can we turn agents off?
Yes. A supreme kill-switch can halt anything that touches the real world, and watchdog supervision monitors the running system. Human owners retain control at all times.
Can it deploy in our infra?
Yes. The platform ships self-hosted, managed, or multi-tenant, with containerized CI/CD delivery and Caddy TLS — so you choose the isolation model that matches your risk posture.