1. Indirect injection
The browser tour illustrates a scraped support ticket containing <system>‑style instructions and the production outcome: Brain detects indirect injection and the proxy blocks the call before an upstream side effect.
The homepage tour is an illustrative, client‑side walkthrough of the production flow. After the Turnstile handoff, the live console creates isolated records in the real HIL and Ledger services; Brain inspection is best‑effort, while catalog dispositions are curated and demo fires bypass the proxy and policy engine. Production agent calls traverse the full mTLS proxy, Brain, Policy, HIL, and Ledger path.
The browser tour illustrates a scraped support ticket containing <system>‑style instructions and the production outcome: Brain detects indirect injection and the proxy blocks the call before an upstream side effect.
A curated Yellow‑tier stripe.refund case requires review. In the live console, firing it creates a scoped HIL pending and ledger evidence; approving exercises the real decision path without executing an external refund.
The browser tour illustrates an agent loop and the production response: the per‑agent velocity tracker trips, later calls are rate‑limited, and the correlation ID remains available for audit. The preview does not generate an upstream loop.
Cloudflare Turnstile gates the handoff — once you pass, you get a 2‑hour demo‑session JWT, a unique correlation prefix, and a live console scoped to your traffic. You can run curated walkthroughs from /demo, make real HIL decisions, and verify the resulting demo ledger evidence.
Pass the Turnstile widget below to mint a session and land in demo.clavenar.com with your own prefix.
/verify from the console after the walkthrough. The ledger walks its append‑only SHA‑256 chain and reports the first broken row if integrity fails.