Hybrid search, graph indexing, and vector-symbolic memory for AI agents
Authorization layer for AI agent spend with human-approved mandates and tamper-evident proof
Stage
Startup
Startup
Founded
2026
2026
Based in
US
Not given
Pricing model
Open source
Free trial
Pricing
Open source under Apache-2.0 license. WARM Cloud is in development with usage-based pricing for sync, backup and verification; details to be published at launch.
Free 12 week pilot for card issuing platforms
Key features
Hybrid search combining BM25 lexical and vector scoring
Vertex graph vector index with 2.29-2.75x throughput vs hnswlib
Vector-symbolic fact memory with holographic reduced representations
AES-256-GCM encryption at rest with Argon2id key derivation
Signed audit log with Ed25519 and W3C DID identity
Secure purge that overwrites deleted data with zeros
Crash-safe append-only log with checksumming
Native Rust API with Python HTTP client and Node.js bindings
MCP server integration for editors and AI agents
WARM Cloud sync, backup and verification without server access to keys or documents
Passkey-signed spend mandates with purpose, budget, merchants, and time windows
Real-time authorization decisions with sub-1 second response time at p99
Human challenge via passkey step-up for exceptional spend
Fail-closed payment processing if no decision arrives in time
Hash-chained evidence ledger with tamper-evident records
Exportable evidence packs for chargebacks and audits
Supports card, wallet, x402 and stablecoin payment rails
What makes it different
Runs entirely locally in your process with no network calls or telemetry
Encryption at rest built into the open-source engine itself, not an enterprise add-on
Significantly faster vector search than hnswlib with graph-indexed vertex retrieval
Signed provenance and verified audit trail using C2PA, COSE and SCITT standards
Embedded library model eliminates dependency on external services or vendor lock-in
Human-approved mandates enforce intent, not just static limits or merchant category blocks
Operates outside the agent in the issuer's authorization path, preventing agent bypass or override
Creates tamper-evident audit trail linked to agent identity, run, and policy version
Never holds funds or issues cards; integrates with existing issuer infrastructure
Single mandate and policy core across multiple payment rails and issuers
warm-rust
Levee