Capability stopped being the constraint.
Models can write code that compiles, passes review and looks like the surrounding codebase. What a large engineering organization still cannot buy is a defensible answer to three questions: what did the agent touch, what proved it works, and who allowed it. Delatura exists to answer those, and to make the answers hold up when someone hostile is asking.
The gate is the product
Most of this category is racing on autonomy — how much an agent can do without a person. That race is real, and we are not in it. Our bet is that inside a company with hundreds of engineers, the binding constraint is not how much an agent can do; it is how much of what it did you can defend afterwards, to a reviewer, to a security team, and eventually to an auditor.
So the interesting engineering here is not the agent. It is the isolation it runs inside, the checks it has to pass before anyone is asked to look, and the trail that makes a run explainable a month later. Get those right and autonomy becomes a dial you can safely turn up. Get them wrong and no amount of capability is deployable.
Four commitments we can be held to
These are operating rules, not values. Each one is falsifiable — you can check whether we kept it.
Mechanisms, not adjectives
Every claim on this site names the thing that enforces it. If we cannot name one, we do not make the claim — which is why the security page has a list of what we are missing.
The gap list is public
No certification we have not earned, no benchmark we have not run, no integration that does not exist. The list shrinks in public, and that is the point.
Enforced below the application
Isolation lives in database policies, capability checks fire when a tool executes, and the audit trail cannot be updated or deleted by the application. Controls that depend on remembering are not controls.
Evidence travels with the work
A change that cannot show what proved it is a change someone has to re-derive by hand. We would rather spend the engineering on the trail than on the demo.
Pre-release, and honest about it
Delatura is in private beta. Self-serve sign-up is closed, we onboard a small number of teams at a time, and an engineer from our side is on the first runs with you. That is not scarcity marketing — it is what a product at this stage actually requires, and pretending otherwise would waste your quarter as well as ours.
In exchange, beta teams get direct influence over what ships next, the unabridged changelog, and a straight answer when something is not ready.