Cost ceilings & approval
Current paid operations expose a maximum-charge requirement or request-time pricing model. Approval remains a separate caller boundary.
Security / authority boundary
Authority is explicit, scoped, and inspectable.
Security on this site means specific implemented or contract-bound controls with visible limitations. It does not mean a certification badge, audit opinion, or compliance status that Clervo has not published evidence for.
request boundroute qualifiedproof after verify
Control surface
Eight boundaries, each with an evidence state.
A control can be live-bound, directly verified, bounded but incomplete, unresolved, or explicitly not claimed. Those states are not interchangeable.
Action classification
A public operation-level read/write/irreversible classification is not bound across the current catalog. This page does not invent one.
Provider identity & route policy
Observed routes expose supply-family identity and lifecycle. Internal route policy and supplier-rights evidence are not published here as a security certification.
Sandbox isolation
The canonical sandbox.run contract states pinned gVisor execution, denied network access, strict resource ceilings, cleanup, receipt, and replay semantics.
Idempotency & replay
The owner-funded Search proof verified same-result replay without a second authorization, execution, or charge.
Settlement reconciliation
Unknown settlement is represented as a recovery state that prohibits retry until reconciliation.
Evidence & provenance
Generated observations retain source, generator, timestamp, release identity, lifecycle, and proof level rather than hand-written status claims.
Independent assurance
No SOC 2, ISO 27001, penetration-test result, independent security audit, bug bounty, or compliance certification is claimed on this surface.
Claims ledger
Implemented control is not third-party assurance.
The page names the strongest available evidence source beside each claim and leaves missing assurance missing.
Maximum-charge boundaryGenerated discovery / pricing metadataInspect pricing
Replay without second chargeOwner-funded private proofInspect proof
Unknown settlement retry prohibitionGenerated onboarding recovery contractInspect recovery
Independent certificationNot boundno claim