Security
A security philosophy, stated as engineering.
Tajalli's products are control infrastructure. Their security posture follows from the same principles as their decisions.
01Principles
How the system is meant to behave under pressure.
- Source-bound evidence
- Decisions consume named evidence with recorded provenance. Inputs that cannot be attributed are not treated as facts.
- Deterministic core
- The decision path contains no sampling. Equivalent state and policy produce equivalent decisions, which makes behavior testable and reviewable.
- Versioned policies
- Policies are immutable, versioned artifacts. Every decision references the exact policy that produced it.
- Least privilege
- Components hold only the authority their role requires. Agents mediated by RADM do not hold the credentials of the systems they act on.
- Fail closed
- Missing, stale or unverifiable inputs resolve to no permission. Degraded conditions reduce what may proceed; they never expand it.
- Replayability
- Decisions can be re-executed from recorded state and policy. Disagreement between a decision and its replay is treated as a defect.
- Auditability
- Decision lineage is immutable and content-addressed, so a record can be verified rather than merely trusted.
- Separation of decision and economic layers
- What is admissible is decided independently of what is profitable. Economic optimization operates within certified bounds, not on them.
- Secure deployment
- Deployments are designed around customer-controlled environments, encrypted transport, tenant isolation and shadow operation before any enforcement.
Certifications
We describe principles here, not certifications.
Third-party certifications and assessments, where held, are shared directly with customers during procurement.
Responsible disclosure
Report a vulnerability.
If you believe you have found a security issue in this website or a Tajalli product, write to contact@tajalli.tech with the subject “Security report”. Please do not access data that is not yours or degrade service while investigating.
Enterprise enquiries
Put a deterministic boundary before consequence.
Discuss an enterprise evaluation, shadow deployment or technical integration with Tajalli.