Getting Started

The 90-Second Orientation

DefendableCloud is the hosted proof vault for AI and agentic work.

DefendableOS is the engine. DefendableCloud is the vault. The engine runs the rulebook; the vault stores and shares the proof.

The central workflow is:

Inputs -> Evidence -> Execution -> Checks -> Verdict -> Approval -> Receipt

A Run is not “the model said it is good.” A Run is evidence plus a rulebook plus a verdict plus an approval plus a hash-chained receipt.

Which doc set you want

DefendableCloud is the live public surface at api.defendablecloud.com. These docs describe it end to end. DefendableRouter is a real but local v0.1 spine (CI-verified, not yet publicly deployed); it is documented separately. If you came here for the live proof vault, the CLI and API docs below are your path.

Pick Your Path

Builder

Start here:

• The Defendable Run
• Three Lanes (including the eval flight-sheet lane and its deterministic executor)
• Defendable CLI
• Current API Surface
• Integrate

Operator

Start here:

• Enterprise Security
• Operations Runbook
• Datasets and Models

Buyer or Enterprise Reviewer

Start here:

• DefendableCloud Overview
• Three Lanes
• Generate a Receipt
• The Defendable Run

Run Lifecycle With The CLI

defendable auth login --email [email protected]
defendable auth verify <TOKEN-FROM-EMAIL>
defendable projects create --name "Proof run"
defendable flight-sheets ls --lane agent
defendable runs new --project <project-id> --flight-sheet cre_memo_dscr_ltv_v1
defendable evidence add <run-id> --kind note --label "source facts" --content "..."
defendable submission add <run-id> --output-file ./agent-output.json --agent claude-code --model claude-opus
defendable audit run <run-id>
defendable audit finalize <run-id>
defendable approval set <run-id> --decision approved
defendable receipt generate <run-id>
defendable verify <share-url-or-token>

What Exists Now

Current live/foundation surfaces:

• DefendableCloud marketing site, Vault app, API, and CLI
• authenticated organizations and roles
• projects and Runs
• evidence, submissions, audits, approvals, receipts
• public receipt sharing and ledger verification
• dataset library and download receipts
• model catalog and model pin receipts
• cook runner routes
• incidents and stack assessment
• enterprise runbooks and WAF guidance

Note

DefendableRouter is real backend code (v0.1 spine, CI-verified) but runs locally and is not part of the live public surface above. It is documented separately and mints its own local checksummed receipts, distinct from the Cloud’s per-org hash chain.

Roadmap surfaces:

• enterprise SSO/SAML/OIDC
• SCIM
• external security review
• formal SOC2 audit
• public SLA/status program
• generated OpenAPI reference
• DDEED public anchoring beyond the current per-org receipt-chain verification

Read Next

Best sequence:

1. DefendableCloud Overview
2. The Defendable Run
3. CLI Guide
4. Current API Surface
5. Enterprise Security