Coding agents: review production changes.
Check migrations, infrastructure changes and deploys before they run, with production exceptions held for your chosen engineers.
Stripe is infrastructure for payments. Runledge is infrastructure for agent actions. From coding agents updating production to claims agents issuing payouts—set the rules, route sensitive decisions to human approvers, and keep a verifiable audit trail.
Tool call · claude-code
db.migration.apply
target: production
Your rule
Production writes need 2 admins
Decision
Held for approval
1 of 2 signedReceipt
Ed25519 signed · identity and time
OpenAI, Anthropic, LangGraph or your own loop.
Allowed, blocked, or held for approval.
Runs only what was allowed.
Signed receipt, cost by department.
Check migrations, infrastructure changes and deploys before they run, with production exceptions held for your chosen engineers.
Route payout and policy-change exceptions to your adjusters and keep their decisions ready for review.
Check proposed actions through REST or OAuth MCP while keeping your models, agents and tools.
Create a free account and workspace.
Require a manager’s approval for refunds over $500, then create an API key.
Call Runledge before your agent’s tool runs, follow its decision, and record the outcome.
Configure a workspace rule, then send a sample proposal to check it before your code runs.
curl --fail-with-body https://runledge.lovable.app/api/public/v1/preflight \
-H "Authorization: Bearer $RUNLEDGE_API_KEY" \
-H "Content-Type: application/json" \
-d '{"action":{
"agent":"billing-agent",
"action_type":"stripe.refund.create",
"target_system":"Stripe",
"metadata":{"amount_usd":250}
}}'The obvious question
A process can’t be its own security boundary. If the agent is compromised or rewritten, checks inside it disappear with it.
Keep policy outside agent code, with your executor enforcing the decision or the broker holding provider credentials.
Version policy changes separately and require your chosen reviewers for risky action exceptions.
Give auditors signed identity-and-time receipts and file-hash manifests they can verify independently.
Share workspace rules across the models, frameworks and agents your teams connect.
Your execution layer can't be. Runledge sits between the tool call an agent proposes and the system it would change.
Your models and workflow engine propose tool calls for policy review.
Check proposals against your rules and collect the approvals needed before execution.
Your executor runs allowed actions, or the credential broker calls the provider host bound to its stored key.
Your collector pulls ordered audit events, and auditors verify export integrity against a signed manifest.
For every team that signs off
Compare draft policies against recent action records before applying a versioned revision.
Give auditors read-only access to signed receipts, export manifests and public verification keys.
Compare reported model spend, estimated labor value and risk exposure by department, with CSV and PDF exports.
Where this goes
Check proposed actions, require approval for exceptions and keep signed records of reported outcomes.
When your agent acts at a partner, a signed ticket proves your rules allowed that exact action. The partner still applies its own.
Receipts that partners, auditors and, one day, insurers can check for themselves.
The Developer plan is open now. No waitlist, no card. Sign up, get an API key and make your first check.
Start freeEnterprise
Need a security review, self-hosted deployment or a custom contract? Tell us where to reach you.