Security

Nexus is for teams that cannot let an agent act without a check.

If Nexus says no, the action does not happen.

What you get

Check before a tool call or a write leaves
Person on the path when it matters
Record you can export
Fail closed if the gate cannot decide
Kill switch to stop in-flight work

Baseline

Control	Implementation
Transport	TLS 1.2+, HSTS preload
API keys	Hashed at rest, constant-time verify, scoped permissions
Tenant isolation	Row-level security on tenant data
Record	Append-only, hash-chained
Kill switch	Global and per-agent stop, in-flight abort
MFA	Passkeys, device trust

Who authenticates

Actor	Mechanism
Console users	Passkeys + MFA. See Authentication.
Integrations	API keys. See API keys.
Agents	Agent credentials. See AgentIAM.

Kill switch

Operators can stop work in flight:

curl -X POST "https://api.hardalion.com/api/v2/infrastructure/kill-switch/global" \
  -H "Authorization: Bearer $API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"reason":"security_incident","scope":"tenant"}'

Requires elevated scope. The stop is written to the record.

Exports

When you need to prove what happened, export the record. See Compliance exports.

Procurement

Enterprise pilots receive control mappings, test summaries, and processing terms on request. Get in touch.