AI-Native FoundationsSecurity · The Grid
Security · The Grid
The control-plane proxy for all agent traffic: auth, rate limiting, kill-switch, audit.
The Grid is the AI control plane: the proxy every piece of agent traffic flows through, providing auth, rate limiting, the kill-switch (derez), and audit. It is Layer 1 of the two planes.
Product definition (ADR-010): "the AI control plane infrastructure across which Runners and Runlines operate."
What it does
| Capability | Why it matters |
|---|---|
| API Proxy Gateway | One controlled path to every core/critical system. No agent talks to a core directly. |
| Granular Keys | A key per vendor / agent / MCP instance → precise access control + per-connection behavioral baselines. |
| Grid Analytics | Real-time view of all AI activity for compliance officers and CTOs. |
| Derez (kill-switch) | Instant 2FA-protected disable of any key/connection. Disabled ≠ deleted, preserved for forensics. |
| Audit Trails | NCUA-examination-grade logging; member data hashed. |
Where it lives
The Grid's code lives in the grid monorepo (services/grid), extracted from arc/gate/ per PRD-RUNLINE-007. That same repo also contains Tower and Circuit, two separate products. Don't equate the repo name with this one service.
The Grid is one of the four things the Runline Framework composite is made of, alongside the Tower, Circuit, and the Runner fleet.
Deeper reference (canonical)
- Platform Services · The Grid
- Platform Services · Circuit, the org nervous system / CDC
- ADR-010 · Runlines Lexicon, where "The Grid" is formally defined
- ADR-021 · Grid ↔ Cores Banking-Core Integration