Questions, answered.

What is NOCTRYS?

NOCTRYS is a self-hosted, deterministic runtime governance layer for AI agents. It sits inline between your agents and the tools they can use, judges every action against an explicit policy, blocks the dangerous ones, detects malicious behavior, and produces a tamper-evident, independently verifiable audit anchored on the AERE chain. Its tagline is "the behavioral black box for AI agents."

Is NOCTRYS just an MCP gateway or a model guardrail?

No. Gateways route and rate-limit calls. Guardrails read prompts with another model: probabilistic, and on the cognition plane. NOCTRYS governs behavior on the action plane, deterministically (no model in the decision path), and cryptographically proves what happened.

How is NOCTRYS different from Microsoft Agent Control, AWS AgentCore, or Palo Alto?

Those are cloud-hosted or managed. NOCTRYS is self-hosted: it runs in your own infrastructure and never sees your data. Its audit is also independently verifiable and non-equivocable: anchored on a neutral chain (AERE) and cosigned by independent witnesses, so a company cannot forge proof about itself. Self-anchored logs can be rewritten by their operator.

Does NOCTRYS use AI to enforce?

No. Enforcement is deterministic: there is no AI model in the decision path, so verdicts are reproducible and the system fails closed on malformed or unknown actions.

Can I verify NOCTRYS’s claims myself?

Yes. That is the entire point. Anyone can verify a NOCTRYS audit seal in their browser at /verify. The benchmark (0% attack success over a 13-attack battery, 100% benign utility), the OWASP Agentic 10/10 coverage, and the ~16µs overhead are all reproducible. See /why-noctrys for how to check each claim.

Where does our data go?

Nowhere. NOCTRYS is self-hosted; only a 32-byte hash of the audit log is anchored on-chain. Your prompts, tools, and data never reach NOCTRYS.

Is NOCTRYS production-ready? Do you have customers?

The enforcement core is built and tested (72 automated tests, 0% attack success on the benchmark). NOCTRYS is early-stage and currently onboarding its first design partners. We have no named customers yet, and we would rather state that honestly than claim scale we do not have.

What does NOCTRYS cost?

Free for the first five design partners (a two-week, self-hosted pilot). Commercial tiers are priced on fleet scale. See /pricing.

What regulations does NOCTRYS help with?

The EU AI Act (Articles 12 logging, 14 human oversight, 15 robustness, 26 retention), mapped to concrete controls, and OWASP Top 10 for Agentic Applications 2026 (10/10 covered). The compliance report also maps NIST SP 800-53 control families (AC, AU, CM, IA, IR, SI) and aligns with the CSA MAESTRO 7-layer model. These are mappings, not certifications.