MakerChecker

MakerChecker is a self-hosted checkpoint in front of your agent. It enforces segregation of duties in code: the agent that proposes an irreversible action is refused as its own approver, a hard 403, not a prompt-level promise. Because this boundary sits outside the model, even a fully compromised agent cannot sign off its own work. Every decision commits to a signed, hash-chained log your auditor can verify offline, with no access to your systems. That independent proof is what gets the agent into production.