CP-01 Open Standard
One check, six questions.
Before anything runs, ARIA answers all six. A missing answer means the action is rejected.
1. Identity (Who)
Who is acting — the agent and the hardware it runs on are signed and checked.
2. Operation (What)
The action must match the signed policy rules exactly — nothing loose.
3. Jurisdiction (Where)
Which law applies — routed to the right legal anchor (Frankfurt, Singapore, London).
4. Vertical Domain (Which)
Which industry rules load — banking, energy, insurance — from configuration, not a rebuild.
5. Lineage (When)
Every decision points back to the one before it in the same case — a broken link is a rejection.
6. Assurance (Trust Floor)
The key quality needed from the secure hardware — and how much risk the law allows.
Book an evaluation. Bring a real deployment. Leave with a record you can verify.
In-person talks for risk officers, security researchers, and audit teams. No account. No browser scripts.