Policy-defined authority
Authority is scoped to a named environment, action class, and condition. A confidence score cannot grant permission.
Trust and safe autonomy
Grant authority explicitly, test it before use, and withdraw it when conditions change. Ollandi checks permission at execution time and escalates when evidence, policy, or service constraints do not support action.
Principles
Review authority, uncertainty, recovery, and accountability before enabling a response path.
Authority is scoped to a named environment, action class, and condition. A confidence score cannot grant permission.
Review supporting and conflicting evidence, confidence, and missing context. Uncertainty can require a narrower action or escalation.
Supported actions have defined rollback paths. High-impact or irreversible actions require explicit human approval.
Authority grants, policy checks, approvals, refusals, and overrides remain available for review.
How it stays trustworthy
Use incident replay and observation-only operation to inspect proposals, missed findings, and inappropriate actions before enabling execution.
Inspect whether conclusions follow the available evidence and whether conflicting signals change the assessment. A plausible explanation alone is insufficient.
Ollandi is tested against real environments, adversarial behavior, and attempts to manipulate it, including compromised agents and poisoned policy.
Deployment path
Expand permission only when observed behavior meets your acceptance criteria. Narrow or revoke it when evidence quality or operating conditions deteriorate.
Validate telemetry quality, source integrity, and the observation scope.
Test ambiguous incidents, policy conflicts, and loss of required context.
Grant named actions with runtime checks, escalation owners, and recovery procedures.
Glemad safety frameworks
Ollandi is built under Glemad's published safety, evaluation, and deployment frameworks.
How Glemad approaches safety across research, models, and products.
Read the overviewHow models are tested against real environments and adversarial behavior.
Read about evaluationWhere autonomous systems may act, and where they must stop.
Read the frameworkWhat makes machine reasoning worth relying on.
Read the principlesHow Glemad introduces and discloses capability in the field.
Read the frameworkHow Glemad governs its systems and supports customer obligations.
Read about governanceSpeed without control is a risk.
David Idris, CEO, Glemad
FAQ
Yes. Incident replay and observation-only operation let you inspect findings and response proposals without changing the environment. Replay results depend on the evidence available.
Your organization, through policy. You define which action classes may run on their own and which need sign-off, with separation of duties built in.
Authorized operators can stop further execution and revoke or narrow authority. Supported rollback procedures apply to eligible actions; an override cannot undo an irreversible effect.
The system preserves uncertainty and blocks or escalates actions that lack required evidence, authority, or quorum. Missing information is not treated as confirmation that a service is healthy.
Get started
Discuss the failure scenarios, approvals, and assurance requirements your team needs to evaluate.