Platform layer
Autonomous except money and compliance.
Operational control is enforced by audited, masked, policy-gated agents — not by withholding automation. The agents carry the pipeline. Four decisions never leave a human’s hands, and that is a business decision, not a technical limit.
The four gates
What an agent may never do alone.
These are load-bearing. An agent may draft any of them and put it in a queue; it can never make the transition itself.
Payments
Invoices and payouts are drafted; a person releases the money.
Iran-compliance
Sanctions, KYB and route screening clear or hold under legal review.
Proof of delivery
A leg turns delivered only on physical proof — never an agent’s word.
Plan approval
Which route plan to book is the customer’s commercial choice alone.
What agents do carry
The operational pipeline, end to end.
Everything below runs with masking and audit fully intact. None of it touches money, sanctions, physical proof, or the customer’s commercial choice.
- Cargo intake and request drafting
- Decomposition into legs
- RFQ creation and dispatch
- Quote outlier flagging and revision requests
- Route-plan build and publication
- Booking
- Execution advance and milestone events
- Document generation
- Consignee invitation
- Customer and consignee update drafting
How it is governed
Four rules that make an agent safe to point at a live corridor.
An agent is a user, not a system account
There is no elevated agent identity and no service token with a wider view. An agent acting for a provider sees exactly what that provider sees. The only thing that distinguishes it in the record is a flag marking the actor as an agent rather than a human.
Deterministic logic stays code
Provider eligibility scoring, quote normalization, currency conversion, outlier detection, margin calculation, masking and every state-machine transition are ordinary services. The agent decides what to do and drafts the content; the services do the thing and emit the audit record.
Every execution is on the record
Each agent tool call is logged through the same audit service a human action uses, carrying the initiating user, the run, and the model. Two patterns are distinguished explicitly: work an agent executed, and work an agent drafted for a human to approve.
Runs have a budget, not a leash
Every run logs its token spend against a budget. A run that exceeds it pauses for human review rather than looping — which is simultaneously the cost control and the safety control.
An agent for every role
Seventeen roles. Seventeen different views.
Each role instructs in plain language and inherits exactly its own permissions and masking. No role reaches another’s data, and no agent gets a wider view than the person it acts for.
autonomous drafts, a human approves
- Cargo owner— autonomous
Describe it once — the agent drafts, submits and tracks the shipment.
- Consignee— drafts, a human approves
Tracks inbound cargo and confirms delivery against proof.
- Freight forwarder— autonomous
Quote and run customer cargo under your own brand; your margin stays sealed.
- Logistics / 3PL— autonomous
Bundles and quotes multimodal lanes end to end.
- Shipping line— autonomous
Reads its masked RFQ and drafts a sea quote — never a competitor’s.
- Road carrier— autonomous
Drafts road quotes on the lanes it’s eligible for.
- Rail operator— autonomous
Drafts rail quotes and holds slots on its corridors.
- Air cargo— autonomous
Prices the masked brief and drafts an air quote.
- Port / terminal— autonomous
Logs gate-in, gate-out and release events with proof.
- Customs broker— autonomous
Advances the declaration and chases the missing commercial documents.
- Warehouse / CFS— autonomous
Records receipt and release on its assigned legs.
- Insurer— drafts, a human approves
Rates cover to the declared value — binding waits for a human.
- Control tower— autonomous
Orchestrates legs, RFQs, normalized plans and booking across the network.
- Finance & compliance— drafts, a human approves
Drafts invoices and risk screens — you approve the money.
- Super admin— autonomous
Provisions orgs and roles — every change immutably audited.
- API partner— autonomous
Adapter health and integration status, summarized. Never margin or competitor data.
- Investor— drafts, a human approves
Funds tokenized assets in USDT and earns pro-rata as they perform.
Describe what you need. Approve what matters.
The agent picks up your words at sign-in and works as your role from there.