Runtime Authority Control
The governance layer beneath every agentic AI platform.
RTAC enforces what an agent is authorized to do — at the moment it acts, before the action executes. Every tool call, every function call, every API request: checked against a declared authority scope, permitted or denied in real time, and attested on the record.
Every action an agent takes passes through the enforcement layer before it reaches the system it's acting on.
RTAC sits between the agent runtime and the tools, APIs, data repositories, and functions the agent may invoke. It evaluates each call against the agent's authority scope — the specific actions it was authorized to take under the governing policy — and enforces that boundary at execution time.
In-scope calls are permitted. Out-of-scope calls are denied before execution. Every decision is attested — a tamper-evident, per-action audit artifact that constitutes the Runtime Assurance record.
RTAC is not an agent-authoring platform. It is the authority layer the selected platform requires beneath it.
Enforcement boundary
RTAC's first fielded surface: contract-aware enforcement for API integrations and connected vendor access.
The engine is designed for additional surfaces. Details available under appropriate confidentiality protections.
API & MCP
Contract-aware enforcement for API integrations. Every vendor call scoped to exactly what the agreement permits, enforced at the point of the call.
Pilot deploymentWe are not a platform competitor. We are the runtime authority subcomponent the winning platform requires beneath it.
Mandatum Systems is the U.S. government-facing entity behind RTAC, separately incorporated and structured for controlled deployment environments.
Mandatum is operated as a standalone government-facing entity — a deliberate structural separation maintained for export-control and operational security purposes.
Teaming inquiries, government briefings, and prime-integrator conversations welcome.
Mandatum is open to teaming with any prime or system integrator whose platform requires a runtime authority layer for classified or edge/DIL environments.
This website contains no controlled technical data. RTAC mechanisms are withheld pending patent filings. Detailed architecture and implementation evidence are available under appropriate Government-directed protections.
Export-control jurisdiction determination is in process with counsel. SAM.gov registration is in process.