Platform / Operator Visibility
Day-2 control for agent actions
See decisions, approvals, budgets, and kill-switch state from the self-host kernel, plus Stage 2 control-plane ops (filters, metrics home, policy dry-run, webhook channels, optional OIDC).
Built + tests pass = done. No design-partner or external proof gate. Mode A public baseline remains Quiet Open-Core v1.2.0.
Available nowshipping with ActantOSComing soonon the product roadmap

Kernel foundation. Control plane shipped.
Stage 1 records every intercept, decision, and tool result in a hash-chained session timeline. Operators can export evidence, arm a kill switch, and enforce budgets without trusting prompt-only guardrails.
Stage 2 Agent Runtime Control Plane is done: session/decision filters, ops metrics home, policy dry-run, webhook approval channels, and optional OIDC for operator routes. Stage 3 isolation/WORM/SIEM remains future.
Available now (Stage 1 kernel)
Session event timeline
Available nowHash-chained intercept, decision, and tool-result events per session for forensic review.
Kill switch & budgets
Available nowDeny-all kill switch and session budgets/rate limits enforced before execution; surfaced on ops metrics home.
Ops metrics home
Available nowAllow/deny/approval rates, kill-switch state, and budget remaining via /v1/metrics/usage ops_home.
List filters
Available nowFilter sessions and decisions by status, agent, outcome, risk, and session id.
Available now (Stage 2 control plane)
Policy dry-run
Available nowPOST /v1/policy-bundles/:id/test evaluates without activating the bundle.
Webhook approval channel
Available nowNotify and decide approvals outside the web UI via webhook channel secret.
OIDC operator auth
Available nowOptional bearer tokens gate ops APIs while intercept stays fail-closed for agents.