FinOps

Cost is a ceiling in the envelope, and a record.

Cost is not the core assurance system. Where cost appears in the record, it is the ceiling in the autonomy envelope: evaluated by the policy gates at pre-check before anything runs, enforced during execution, and recorded on the chain every time. A supporting FinOps cost-intelligence module, described on the pricing page, sits beside the register, not inside it.

Request Access The autonomy envelope

autonomy_envelopeproduct-set limits shown

{
  "allowed_action_types":      ["modify", "create", "configure", "scale", "restart", "failover", "update"],
  "blocked_action_types":      ["destroy", "delete", "drop", "purge", "wipe", "exec", "shell"],
  "max_affected_resources":    5,
  "min_confidence":            0.9,
  "cost_ceiling_per_action":   "100.00 USD",
  "excluded_environments":     ["production-critical", "restricted-gov"],
  "change_windows":            ["Mon to Fri, 00:00 to 24:00 UTC"],
  "emergency_stop":            "andon: any operator halts all autonomous classes",
  "dry_run_first":             true
}

One constraint of the envelope.

The autonomy envelope is a machine-enforced object read before every autonomous action. It carries eight constraints and a dry-run flag, and the cost ceiling is one of them. The envelope is evaluated at PRE-CHECK, before execution; 3/3 policy gates are required; and every evaluation of it is itself a chained record.

allowed_action_types: The action classes that may run under this envelope.
blocked_action_types: The action classes this envelope refuses; a proposal in one of them stops at PRE-CHECK and the stop is recorded.
max_affected_resources: Blast radius, capped by count.
min_confidence: The published confidence a proposal must clear: 0.9.
cost_ceiling_per_action: The most a single action may spend. Evaluated before execution, enforced during it, recorded either way.
excluded_environments: Environments no autonomous action may touch.
change_windows: When an action may run at all.
emergency_stop: The andon cord: any operator halts all autonomous classes.
dry_run_first: Required for high-impact action classes before the action may run.

Evaluated before, recorded always.

At 01 PRE-CHECK the gates evaluate the envelope: blast radius bounded, target state pinned by hash, 3/3 gates required, or the action stops there and the stop is recorded. At 03 EXECUTE the action runs inside the envelope it passed, within the change window, under the cost ceiling.

Cost ceilings and change windows bound sustained invocation, which is how PolicyCortex answers inference denial of service (MITRE ATLAS AML.T0040), and every ceiling evaluation is a chained record. What the record then shows a reader is the ceiling that applied, the evaluation that enforced it, and the action that ran under it, each committed to the digest of the record before it.

Cost intelligence is a supporting module, not the core assurance system. The FinOps cost-intelligence module is described on the pricing page: included in Full Platform or available separately. What this page records is narrower, and it is the part an assessor can recompute.

The whole wrapper an action runs inside, from detect to rollback identifier, is on the mechanism page and in full on proof of agency.

Set a ceiling, then read what the record says about it.

Request Access