Skip to main content
Pricing

Diagnose the past. Protect the next effect. Operate the boundary.

The open protocol is free. The one public pilot is $25K for 90 days and 1 protected workflow. Gate Qualification can carry accepted evaluation evidence into that decision when needed. It is not identity, certification, or authority. Implementation is scoped; Operated Gate is quoted only for a customer-specific deployment.

Qualification travels. Authorization stays local. Gate controls the consequence.

Open Protocol
$0
Apache 2.0 · self-operated

Build and verify under your own keys when your team wants to operate the trust boundary itself.

Open authorization-evidence formats and Gate runtime
TypeScript, Python, and Go verification packages
Public conformance vectors and security case
Gate Qualification v2 formats and verifier
MCP and SDK integration packages
Self-hosted under your own trust policy
Community support; your team operates policy and evidence
Read the protocol docs
Protected-workflow pilot
$25K
fixed scope · 90 days

Protect one buyer-selected consequence boundary, beginning with synthetic and read-only validation before any accepted production change.

1 protected workflow
First profile: Finance operations vendor bank-detail change or payment release
No accepted exact-action authority and required evidence, no provider entry
Other consequential workflows remain eligible
Synthetic replay and governed read-only validation first
Buyer-approved executor boundary before production
Action Control Manifest and acceptance test plan
Scope the pilot
Gate Implementation
$150K-$250K
one prospective consequence boundary

Turn the selected risk area into a fail-closed prospective control, with optional qualification and reliance-risk policy at the real executor boundary.

System-of-record action and route binding
Receipt Required challenge and approval acquisition
Exact-action verification and one-time consumption
Optional qualification for one exact measured candidate and assignment
Customer-owned Reliance Program and separately signed loss-schedule policy
Open-exposure ceilings, no-blind-replay handling, and independent reconciliation
Technical-refusal, population-reconciliation, receipt-census, and loss-feed artifacts
Customer acceptance vectors and production runbook
Design the Gate
Operated Gate
$250K-$500K / year
deployment-specific quote by protected workflow and operating boundary

Operate policy, approval, consumption, reconciliation, and evidence inside one contracted deployment. Scoped after implementation acceptance; not a generally available live service.

Everything accepted in the Gate implementation
Private cloud, VPC, or self-hosted deployment options
SAML/OIDC identity and SCIM provisioning integration
Durable consumption, open-exposure, reconciliation, dispute, and remedy operations
Evidence retention, export, observability, and SIEM integration
Negotiated support, service level, and deployment warranty
Scope a deployment

No seat tax and no generic API-call bundle. Production pricing follows the number and risk of protected workflows, the deployment boundary, evidence retention, integrations, and service level. Run the free sandbox first →

Gate Qualification v2 is an open entry path, not a pricing or certification tier. It carries portable, time-bounded qualification from accepted evaluation evidence into a Gate implementation when the protected workflow requires evaluated-candidate evidence. Qualification is not authorization, certification, deployment evidence, or proof of a successful effect.

Reliance Risk Plane scope is also deployment-specific. EMILIA can verify customer-supplied loss terms, reserve declared open exposure, and emit bounded risk evidence. EMILIA does not insure, bear or allocate loss, adjudicate disputes or losses, prove coverage, causation, solvency, or population completeness, or move money. See the shipped boundary →

Start here · one protected workflow

Protect one real consequence boundary in 90 days.

The first profile is finance operations vendor bank-detail change or payment release: no accepted exact-action authority and required evidence, no provider entry. Missing, stale, exhausted, invalid, or mismatched authority does not admit provider entry on a completely mediated covered path. Gate does not prove bank-detail correctness, payee identity, fraud absence, or provider success. Other consequential workflows remain eligible. Every pilot starts with synthetic and read-only validation, and no production path changes until the buyer accepts the executor-bound Gate design.

$25K
fixed, scoped engagement
90 days
synthetic and read-only first
1 protected workflow
buyer-selected consequence boundary
Open verification, paid operation

Protocol proves. Gate prevents.

CapabilityOpenDiagnoseImplementOperate
Verify receipts under your own pinned trust policy
Use public formats, packages, and conformance vectors
Carry accepted evaluation evidence as a time-bounded qualification
Retrospective workflow diagnosis and source-linked cases
Prospective executor-bound enforcement
Managed production evidence and service operations
Assurance services

Assurance is a service layer, not a proprietary verdict.

Verification remains open and reproducible. Paid engagements help teams operate repeatable re-performance, maintain conformance records and continuous evidence, and prepare bounded packages for auditors and underwriters. EMILIA does not issue audit opinions or accredited certifications.

Explore the Assurance Plane →
Managed evidence re-performance
Conformance records tied to public vectors
Continuous evidence and drift review
Audit and underwriter package preparation
Gate solution profiles

One product, adapted to different consequence boundaries.

These profiles package action schemas, policy templates, and integration guidance around Gate. They are not separate products, and they do not by themselves establish legal compliance.

Government profile

Evidence requirements for configured public-sector determinations and caseworker approvals.

Financial profile

Policy and evidence adapters for configured money-movement and treasury actions.

Energy profile

GRACE composes authorization evidence with action and measurement records at energy-control boundaries.

Multi-party profile

Distinct-human, initiator-excluded quorum evidence for actions that require more than one approval.

Start with one consequential workflow.

Begin with the canonical 90-day pilot, or use the open MCP path to protect one configured tool yourself.