Primary demo · Rental application

Agent gets the decision.Not the secret.

Apply with confidence. Complete the details for your next home while private checks stay inside this page. The connected agent gets useful decisions, never the values behind them.

Selective disclosure via WebMCP

A private value is used locally. Guarded egress releases only an allowlisted result; the raw value is withheld from the agent.

WebMCP connection

Registration state

Checking site toolsChecking the page registration

Tools in this workflow stateConnect WebMCP to register this surface

Current surface

Workflow contextPublic fieldsFlag uncertaintyPrivate bindingPrivate predicate

Evaluate a private predicateDecision only

Request a sealed bindingHuman approval required

Read raw private valuesNever available to the agent

Private predicate

Local only

Income requirementAwaiting check

Ask the connected agent to evaluate the private predicate.

Actual income Withheld from agent

Ask the connected agent to checkIt returns only an allowlisted decision.

Uses income_3x_rent. Guarded egress blocks raw private values from agent-visible tool payloads.

Last tool responseRedacted

No agent tool call yet.

Private binding

Passport number

Not connected

Value sealedStored locally · never rendered

Approval needed

Agent can request a bindingYou approve it here before anything changes.

The page verifies the credential is locally available; approval creates a random opaque session artifact that does not encode the raw value. Guarded egress returns only bound, value: withheld, and a non-secret reference.

Guarded egress, visible

See exactly what crosses the boundary.

The ledger shows actual allowlisted payloads, not inferred YES/NO claims.

1 · Page local Private valueRaw value withheld2 · Controlled crossing Guarded WebMCP boundaryAllowlist enforced3 · Agent-visible Safe resultDecision, status, or reference

Agent-visible record

WebMCP activity

0 calls

Every agent call records allowlisted inputs and redacted outputs.

No agent calls yet

The next connected-agent action will appear here.

Guarded crossing record

Boundary Ledger

0 ops

Each row is the actual sanitized payload released after a local private operation.

No guarded crossing yet

A private predicate or approved binding will add the first payload.

Agent gets the decision.Not the secret.

Let's get your application started.

Tell us about you

See exactly what crosses the boundary.

WebMCP activity

Boundary Ledger