
Fail-closed authorization for AI agents in production
The Membrane is a self-hosted, fail-closed authorization gateway for AI agents with production write access. Every model and tool call needs a live, signed, time-bounded scope. Each allowed action writes a tamper-evident, hash-linked receipt. A replayed proof, a swapped model or an expired scope is refused; a broken chain severs the agent. Your keys, your models, your policy. Open source (Rust). Clone to a refused call in about five minutes, or watch a recorded replay in the browser demo.
The Membrane is an open-source, self-hosted authorization gateway designed for AI agents, ensuring fail-closed access with live, signed, time-bounded scopes for every action. It provides tamper-evident receipts and denies actions with replayed proofs, swapped models, or expired scopes, enhancing security in production environments.
A source that found nothing is a measurement. A source that has not run is a gap. Neither means the launch lacks the thing.