Foundable Research · Interactive evaluator

A permission should be an exact action, not a blank check.

Explore how a consumer AI deputy can bind approval to one action, reject changed or expired authority, and prevent later replay.

Synthetic browser-local simulation · No sign-in · Nothing sends, saves, or spends

Purpose-bound action evaluator

Approve one consequence. Test what happens next.

All values use the reserved .test domain. State lives only in this page until refresh.

No grant
1

Review the exact consequence

Send this email

Integration
Gmail
Action
Send email
Destination
buyer@example.test
Subject
Pilot details
Body
Here is the bounded pilot we discussed.
Authorization
[hidden]

Exact grant binding

Foundable
demo-tenant
Tool use
toolu_demo_001
Tool
gmail.send_email
Digest
8f3c...a91e
Expiry
5 minutes
Uses
1
2

Choose an execution attempt

What reaches the boundary?

Ready to evaluate

Approval alone is not enough. The current attempt must still match at the boundary.

This browser-local evaluator calls no account, API, provider, database, or credential. It demonstrates the decision model; it does not establish formal correctness or production security outcomes.

Interaction-design principles

Make the secure path the ordinary path.

Show consequences, not capability jargon

Review the destination, message, amount, channel, and public effect instead of asking a person to reason about a reusable credential.

Bind approval to what was shown

If material content, destination, tool, or caller changes, the earlier approval no longer applies.

Default to one use

Authority for one action should not become a reusable grant for every later action the same credential could perform.

Recheck at the irreversible boundary

A pause, expiry, scope reduction, stale claim, or unavailable safety read should stop the effect rather than inherit earlier authority.

Evidence boundary

This is an evaluator, not a security guarantee.

The page mirrors implemented design constraints with synthetic data. It is not formal verification, an independent user study, a penetration test, or proof that every production path is free of defects. It connects to no account, provider, credential, database, or Foundable API.

Read Foundable's security overviewBrowse Foundable Research