Isolated MicroVM
Every call starts in a fresh hardware-isolated runtime with no shared memory or persistent disk.
Runtime spec
The Secure Runtime.
Where AURA agents execute — an ephemeral, isolated sandbox built for sensitive prompts, documents, and decision workflows.
Purge-on-exit
Inputs, intermediate state, and session context are destroyed after execution completes.
Encrypted in-flight
Payloads travel over encrypted channels and are decrypted only at the sandbox boundary.
Egress-controlled
Agents reach only the model providers and grounding sources required for the declared task.
Audit-grade transparency
Executions produce a signed receipt with agent, credits, and purge status.
Zero retention · Zero training · Zero compromise