Concepts: Register → Gate → Prove
The Compliade loop in three steps.
Register
Every agent is a system of record: purpose, legal basis, allowed skills, owner.
This underpins GDPR Art. 30 and AI Act inventory.
Gate
At ingest (SDK or Gateway), deny / require_approval / suspend policies apply before an action is treated as allowed.
Approvals inbox is the home screen — Art. 14 enforced, not only documented.
Prove
Append-only journal with SHA-256 hash chain, Art. 30 / DPIA exports, model provenance (Art. 12).
Goal: close the regulator / board file without rebuilding a full GRC suite.
Technical MDX documentation (architecture, detailed API) — coming soon.