Claude tries to send a confidential email. Halyn catches it. You approve or block. Cryptographic proof generated.
Agent registers with Halyn. Consent granted. Manifest declared.
Claude reads files normally. Every action logged to audit chain.
Email to CFO flagged. Autonomy level requires human approval.
SHA-256 hash chain. Tamper-evident. Local. No cloud.