Air-gapped and restricted environments

Offline execution. Local audits.

After installation, browser workflows and bundled audits run locally without a hosted scanner or audit-data upload. The accessibility checks include rules mapped to WCAG 2.1 AA, but they do not establish full conformance; some findings need human review.

  • WCAG 2.1 AAAutomated checks with bundled axe-core.
  • NIST SP 800-53 Rev. 5Eight web-application controls are checked.
  • Commercial licensingCommercial, production, customer-facing, non-local, or third-party-reliant use requires a separate written commercial license issued by Vitron. Contact team@vitron.ai.

The NIST checks cover selected controls, not the full framework or a compliance determination.

Safety classifications

One profile. Human approval for high-risk actions.

  • Read and write-lowAllowed when policy checks pass.
  • Write-highBlocked by default; an operator can approve one pending action in the interactive cockpit.
  • Sensitive fieldsBlocked by default, with a separate per-call option for legitimate tests.

controlled-web is the only profile. An agent cannot change it or unlock a write-high action with a flag, environment variable, or tool argument. The sensitive-input option is separate and should only be used for tests that need to enter credentials or payment details.

Policy before action

Check the action. Record the decision.

Before each planned step runs, Alethia evaluates its action class, selector rules, and kill-switch state. The runtime separately enforces a local-origin boundary for navigation. The run record includes the allow or block decision and its reason. Classification uses rules and patterns, so it is a guardrail—not a guarantee that every risky action will be recognized.

VITRON-EA1 is Vitron's policy specification for agent actions. Contact us for the current draft.

Run records

Inspect what ran and why.

Each run record carries a SHA-256 payload hash. Session exports can include tool calls, policy decisions, and available page snapshots or DOM diffs. The hash supports integrity checks; it is not a digital signature.

  • Local by defaultExports are returned to the connected agent and are not uploaded to Vitron.
  • Review before sharingExports may contain inputs, selectors, URLs, and page data.