Trace Continuity Labs — Every Decision Begins With Authority

Trace ContinuityTRACE·CONTINUITY
Break MePlayground
Trace Continuity — the guardian sees
Runtime Authority Verification

Every Decision Begins With Authority.

Authority verified on every call. PII tokenized before it is ever stored. Every read, write, and retrieval sealed into an append-only audit chain.

Open the PlaygroundTry to Break It
Authority

Re-evaluated on every call — never cached from login.

Action Admissibility

Valid authority is not enough — material conditions at execution time can still stop the action.

Tokenization

SSNs, emails, phones replaced before storage. No raw PII at rest.

Safe retrieval

Only what the caller is authorized to see, at the moment they ask.

Audit chain

Hash-linked, append-only evidence you can export, closed out by a sealed action receipt so a removed tail is detectable.

Playground is live
Independent Qualification Record
Run 2 Final Determination: Pass

A failure was found. It was fixed. Then the same test was run again.

Independent testing identified a material boundary failure during Run 1. The implementation was remediated and independently retested against the same frozen criteria.

Run 2 received a final determination of PASS against the frozen criteria for the tested trajectory and scope.

The original Run 1 baseline and Run 2 independent retest have been preserved as a completed qualification record.

RUN 1

Boundary failure identified

↓
REMEDIATION

Implementation corrected

↓
RUN 2

Same frozen criteria retested

↓
PASS

Independent final determination

Scope note: this is a qualification record, not a certification. The PASS applies to the frozen criteria for the specific tested trajectory and scope — it is not a statement that the platform as a whole has been certified, universally validated, or proven secure.

View Qualification RecordRun 1 Baseline RecordEvidence Timeline
Independent Security & Architecture Evaluation

August 22, 2026 · Chimezie Emmanuel Uzochukwu, Independent Security & Architecture Reviewer

A separate independent evaluation of the Trace Continuity Sandbox covering runtime authority revocation, governed writes, PII handling and tokenization, safe retrieval, audit evidence, fail-closed behavior, and adversarial payload testing — including the evaluator’s documented limitations, weaknesses, recommendations, and scoped technical conclusion. This evaluation is independent of, and did not perform or validate, the Run 1 / Run 2 qualification testing above. It is not a certification or a guarantee of security.

View Independent Evaluation (PDF)
The Playground

Don't believe the marketing.
Try to break it yourself.

Four live surfaces. Real authority evaluation. Real tokenization. Real audit evidence. Hand it your worst inputs and watch the governance layer respond.

Open the Playground

Experience governed memory firsthand.

Authority Trace
EVALUATED
actor: agent_med_42 → user_clinician_18
tenant: medicore.health
scope: patient.read · memory.write
delegation: verified · 3 hops
decision: AUTHORITY OK · proceed to governance
Governance Decision
TRANSFORM
input: "...SSN 456-78-9012, email schen@..."
detected: SSN · EMAIL
policy: PHI/PII · tokenize · retain 7y
verdict: TRANSFORM
evt: evt_a8c3
Tokenization
SEALED
raw_ssn: 456-78-9012
→ token: trace_tok_ssn_a7b3
raw_email: schen@medicore.health
→ token: trace_tok_email_x9f2
raw_pii_at_rest: false
Audit Evidence
APPENDED
chain: evt_a8c3 → evt_a8c7
stages: authority · governance · tokenize · store
hash: sha256:9f2a…c8d1
mutable: false
export: HIPAA · legal hold · DoD review

Authority Trace · Governance Decision · Tokenization · Audit Evidence

Authority Continuity

Most systems authenticate once.
Trace Continuity verifies authority at execution time.

A session token at login is not authority. In hospitals, legal, and defense, the question is not "did this user sign in?" — it is "is this user, this agent, this delegated identity, allowed to do this exact thing, right now, against this exact tenant?" Trace evaluates that on every call. No cached trust. No implicit bypasses.

Per-call evaluation

Authority is re-checked on every read, write, and retrieval — not once per session. An API key is pinned to the one authority it was issued against; revoke that authority and the key stops working, with no silent substitution.

Delegation aware

Agent acting on behalf of user acting on behalf of tenant — the full lineage is walked and fails closed on a missing, revoked, expired, cross-tenant, cyclic, or over-deep link. Where more than one held authority could apply, candidates are evaluated in a deterministic order and every rejection is recorded.

Tenant by construction

Cross-tenant access cannot happen by mistake. The cross-tenant probe used by the public Break Arena is a separate demo-only entry point and is not reachable from the production gate.

Action Admissibility

Valid authority does not always mean an action should proceed.

Trace separately checks the material conditions that exist at execution time, including consent, risk, jurisdiction, compliance, and other governed conditions. If those conditions make the action inadmissible, Trace stops it even though authority remains valid. Every decision produces audit evidence. On the read path this happens twice: once before anything protected is fetched, and again at the last instant before disclosure.

Separate decision

Runtime Authority Verification and Action Admissibility are two independent checks, evaluated and audited on their own.

Material conditions

Consent state, risk score, jurisdiction, legal hold, compliance status and other governed facts. Each assertion is written atomically with a revisioned, hash-chained history row, so the state a decision relied on can be replayed.

Fail closed

If a required condition is missing or stale, the action is refused — not assumed admissible. Trace evaluates the state that has been reported to it; it does not poll outside systems to discover a change nobody told it about.

Authority: verified · Action admissibility: denied — both are real outcomes.

Architecture Flow
1
Authority Verification
2
Action Admissibility
3
Governance Evaluation
4
Tokenization
5
Memory Storage
6
Safe Retrieval
7
Audit Evidence

Authority Verification and Action Admissibility are two separate decisions. Authority can pass while admissibility denies — the execution gate evaluates material conditions after authority is established, on both the write and the read path.

Authority (Step 1)
  • ▸Credential pinned to one authority
  • ▸Revocation and expiry checked at use time
  • ▸Scope, delegation and inheritance verified fail-closed
  • ▸Genesis lineage and authority-event chain verified at runtime
Action Admissibility (Step 2)
  • ▸Material conditions at execution time
  • ▸Consent · risk · jurisdiction · compliance
  • ▸Separate decision from authority
  • ▸Fail-closed with its own audit evidence
Governance (Step 3)
  • ▸PII & PHI detection
  • ▸Redaction & tokenization
  • ▸Retention policy assignment
  • ▸Audit event logging
Memory (Step 4)
  • ▸Only governed result stored
  • ▸Raw PII never persisted
  • ▸TTL enforced at write time
  • ▸Token mappings preserved
Download Technical Architecture Brief (PDF)Download Architectural Buyer’s Brief (PDF)
Step 1 — Authority First

Authority runs before everything else.

Before any data is scanned, tokenized, or stored — Authority evaluates who is making the request and what they are allowed to do. No bypasses.

6 questions Authority evaluates
1
Who is making the request?

API key, agent, or delegated identity

2
Who is receiving the request?

Target user or resource context

3
What permissions exist?

Scopes, roles, delegation chain

4
What actions are allowed?

Read, write, retrieve, export

5
Tenant boundary intact?

Cross-tenant blocked by construction

6
Final verdict?

Allow · Transform · Deny — with evidence

Break Me Challenge

We invite you to attack it.

This is not a game. There is no leaderboard. The Break Me Challenge exists so you can verify, with your own input, that the governance layer behaves the way we say it does. The expected result is not success — it is the platform visibly governing the data and exposing exactly how through "How Was This Governed?"

  • Insert an SSN, credit card, or API key
  • Insert raw passwords or email + phone combos
  • Attempt unsafe retrieval across tenants
  • Attempt authority failures and delegation gaps
  • Attempt policy violations and prompt-style bypasses
Try to break it
attempt_001 DENIED
cross-tenant read · authority failure
attempt_002 TRANSFORMED
raw SSN → tk_9f2a · vault sealed
attempt_003 AUDITED
evidence chain evt_a8c3 → evt_a8c9
Audit & Evidence

If it isn't audited, it didn't happen.

Append-only

Audit rows cannot be edited or deleted — by the platform, by tenants, by us.

Stage-attributed

Every event names the stage (authority, governance, tokenization, storage, retrieval) that produced it.

Compliance-ready

Evidence chains are exportable for HIPAA, legal hold, and defense review workflows.

Governance vs Memory

Memory systems remember. We govern what is remembered.

Mem0 and Zep are excellent at remembering. Trace Continuity Labs is built for environments where remembering without governance is the liability — hospitals, law firms, and defense.

CapabilityMem0ZepTCL
Long-term memoryYesYesYes
Authority continuityNoNoYes
Policy verdicts (allow / deny / transform)NoNoYes
PII detection & tokenizationNoNoYes
Per-tenant encryption keysNoNoYes
Safe retrieval with authority re-checkNoNoYes
Append-only audit at every stageNoNoYes
Compliance posture (HIPAA / legal / defense)NoNoYes

Comparison reflects publicly documented capabilities at the time of publication.

Built for

Where governance is not optional.

Healthcare

PHI tokenized at intake. Authority chains map to clinician scopes. Audit ready for HIPAA review.

Legal

Privileged content stays tokenized in storage. Matter-scoped authority. Evidence chains for legal hold.

Defense

Classification-aware governance. Per-tenant keys. Cross-tenant retrieval is structurally impossible.

Enterprise

Bring your own policy. Bring your own keys. Bring auditors — every stage emits evidence.

Pricing

Enterprise pricing available.

Priced by governance posture, not memory count. Tiers for evaluation through regulated production deployments.

View Plans
Who governs? How is it enforced?

Before you trust it —
you need to understand this.

The Playground is the proof. Test the architecture yourself.

Open the Playground