Mareante. Autonomous Engineering Verified by Pipeline.
State your intent by voice or text. Mareante drives specification discovery, constructs task dependency graphs with strict budget reservations, requires human approval for sensitive actions, and executes within capability-isolated sandboxes.
How It Works
A rigorous pipeline from intent formulation to production release with mandatory human gates on high-stakes operations.
Voice & Intake
Engage via full-duplex live audio or text. Converse naturally with instant barge-in capability to define objectives and boundaries.
Specification Discovery
The engine guides structured clarification until functional goals, deliverable types, constraints, and verifiable acceptance criteria are finalized.
Plan & Reserve
Generates a directed acyclic task graph, calculates worst-case execution costs, and locks pre-authorized budget reservations on the tenant ledger.
Approve Gate
Spoken confirmation within project caps or explicit UI approval for sensitive operations (production deployments, secrets, network egress).
Verified Deploy
Strict test-driven development inside isolated Docker containers, contract suite validation, and automated rollback upon verification failure.
Safety & Rule of Law
Statute-based, objective prohibitions enforced through deterministic fail-closed filters and comprehensive audit logging.
Statutory Prohibitions
Strict prohibition of malware, unauthorized access, fraud, weapons, trafficking, money laundering, animal cruelty, and unlawful surveillance mapped to Swiss and EU law.
Fail-Closed Architecture
Prompts, tool extensions, sandbox egress, and deploy operations fail closed when an anomaly occurs. Refusals include an automated Statement of Reasons.
DSA Notice & Action
Structured notice-and-action intake pursuant to Regulation (EU) 2022/2065, designated single points of contact, and published complaint workflows.
Engineered for Zero-Trust
Comprehensive tenant boundary isolation, credential masking, capability limits, and emergency rotation controls.
Emergency Breach Rotation
One-click atomic revocation: terminates active sessions and scoped tokens, rotates tenant encryption keys, destroys active sandboxes, and logs the incident.
Host-Bound Secret Injection
Credentials never enter LLM prompts, model context, scripts, or application logs. Injection occurs exclusively at the Rust proxy on allow-listed targets.
Complete Tenant Isolation
PostgreSQL row-level security on every tenant-owned table, paired with strongly-typed context structs ensuring tenant boundary integrity across all layers.