CAM is a REST API that requires human consensus before any sensitive action executes. Quorum and veto logic, ephemeral authorization, and a hash-chained TrustAudit log, delivered over standard HTTP. Available today through enterprise early access and pilot integrations.
Full API reference is available to pilot partners and early-access developers.
Your system sends a single POST to the CAM API describing the sensitive action, its designated approvers, and a time-to-live. Nothing executes yet.
CAM notifies the designated human approvers with the full action context and stated purpose. Each one approves or denies independently.
CAM evaluates responses against the configured quorum. A single denial vetoes the action immediately, even if the threshold has not been reached.
Only when quorum is met does CAM issue a time-bound authorization window. It expires automatically after the action completes. No standing tokens.
The request, every response, the veto, the authorization, and the expiry are all written to the hash-chained TrustAudit log. The record is immutable.
One POST creates a governed request. Designated approvers are notified, quorum and veto logic applies, and the authorization expires on its own. This example is illustrative; the full API reference is available to pilot partners and early-access developers.
POST /v1/requests HTTP/1.1
Content-Type: application/json
{
"action_type": "portfolio.rebalance",
"summary": "Rebalance account ACC-4471 to target allocation",
"approvers": ["advisor@firm.com", "principal@firm.com", "compliance@firm.com"],
"quorum": { "approvals_required": 2, "approvers": 3 },
"ttl_seconds": 900
}HTTP/1.1 202 Accepted
Content-Type: application/json
{
"id": "req_8f2c1a90b44d",
"status": "pending",
"quorum": { "approvals_required": 2, "approvers": 3, "approved": 0, "denied": 0 },
"expires_at": "2026-07-29T14:15:00Z",
"audit": "hash-chained TrustAudit log"
}CAM is a standard REST API. Anything that can make an HTTP request can create a governed request and read its status. Authentication details and the full endpoint reference are provided to pilot partners and early-access developers.
There is no self-serve signup and no public API keys yet. Access is granted through the pilot and early-access program so we can onboard each integration with the attention it needs.
Join the pilot and early-access program. We'll share the full API reference, work through your integration, and get your first governed request running.