The control layer for AI software work
AI Software Teams.
Controlled.
Claude Code, Codex, Cursor, and other coding agents do the work. Kizma controls what they're allowed to do.
Design-partner access is coordinated directly. Kizma does not execute agent actions.
Agent request
Claude Code
Kizma control boundary
Read-only inspection
Control decision
Human approval required
State
Awaiting human decision
One control loop
Authority before action.
Kizma sits between an agent's request and the next permitted step, keeping task scope, policy, human decisions, and evidence connected.
- 01Agent
A coding agent proposes an action.
- 02Task
The request is bound to defined work.
- 03Authority
Identity is not treated as permission.
- 04Policy
Kizma classifies the requested action.
- 05Approval
Human authority stays in the loop.
- 06Evidence
The decision and reported outcome are recorded.
A decision, not another dashboard
The requested action meets its control boundary.
Kizma makes the classification, the authority, and the required human action legible before a controlled runtime can proceed.
command_executionControl decision
Human approval required
Runtime must stop before the action.- Task
- Secure payment webhook
- Repository
- checkout-api
- Classification
- Repository-defined test run
npm-test - Reason code
repository_defined_execution_requires_approval- Reason
- Repository-defined execution is not automatically authorized, and Kizma does not attest the execution environment.
- Evidence
- Decision recorded; execution not authorized.
Runtime neutral
One control model across coding agents.
Built to sit above the tools your engineering team already uses. Adapters translate runtime events into a single control contract without turning vendor identity into authority.
- Claude Code
- Codex
- Cursor
- Other coding agents
Kizma control contract
One decision vocabulary. One authority model. One record.
agent-control-contract-v1Ecosystem names describe intended compatibility targets, not partnerships or endorsements.
Governance with provenance
Know what was requested, decided, and reported.
Durable action requests and append-only control events keep authorization separate from runtime-reported outcomes. Reported execution never becomes proof of authority.
- 01Request received
action_requestedTask-bound and classified by Kizma. - 02Decision recorded
require_approval / blockBlock or require human approval. - 03Outcome reported
reported_executedPreserved without laundering authority.
Authorization and runtime-reported outcome stay separate. Version 1 records a block or a required human approval and issues no automatic allow; compliance is derived from the record, never declared by a runtime.
Design partner program
Let the agents do the work.
Keep the authority.
We're working with engineering teams that want agent speed without surrendering policy, approval, or traceability.