Control high-accountability AI workflows without losing the operating record.

Turnkeeper brings policy records, human review, and append-only lifecycle evidence into one organization-scoped workspace for AI-agent operations.

Design-partner access. Production Replay remains gated.

Illustrative operating recordRecorded
  1. 01Agent eventRequest receivedMetadata accepted
  2. 02Policy recordContext preservedReference attached
  3. 03Human reviewReview openedState recorded
  4. 04Decision evidenceOutcome retainedEvent appended
organization
tk_enterprise
project
support_ops
review_state
open
privacy
metadata_only
01Organization-scoped access
02Project and environment credentials
03Explicit human review states
04Metadata-only Replay evidence

Replace fragmented oversight with one durable record.

Enterprise AI operations break down when policy context, review decisions, and event history live in different systems.

  1. 01Policies live away from the work

    Keep workflow policy records and defined decision states in one operating surface.

  2. 02Reviews happen in side channels

    Track the proposed action, policy reference, priority, and review state together.

  3. 03Evidence is reconstructed later

    Capture ordered, append-only lifecycle metadata by project as work happens.

  4. 04Ownership becomes ambiguous

    Partition records by organization, project, and environment; bind credentials to projects.

A shared operating layer for consequential workflows.

Four connected surfaces keep responsibility and evidence legible.

  1. 01

    Policy records

    Keep the governing reference close to the workflow and the resulting decision.

  2. 02

    Human review

    Give operators a defined queue, priority, and durable review state.

  3. 03

    Replay evidence

    Retain ordered lifecycle metadata without storing message content in Replay.

  4. 04

    Scoped access

    Separate organizations, projects, environments, and project-bound credentials.

01 / Human review

Move reviews out of side channels.

Keep the proposed action, policy reference, priority, and decision state in one review context so operators can act with the same record.

  • Explicit review states
  • Defined decision states
  • Linked policy references
Review queueHigh-accountability workflows
03 requests
Illustrative human review queue
RequestPolicy referencePriorityState
Refund exceptionrefund-exception-v3HighOpen
Account closureaccount-change-v2MediumApproved
Sensitive disclosuredisclosure-v1HighBlocked
Selected request
Refund exception
Proposed action
Requires review
Decision state
Open
02 / Replay evidence

Keep lifecycle evidence ordered and inspectable.

Replay accepts strict, metadata-only lifecycle events and retains them as an append-only project history for investigation and operational review.

  • Canonical lifecycle event types
  • Idempotent ingestion
  • Project-scoped event history
Replay event historyturn_01J7C2K
metadata_only
  1. 001input.received
  2. 002turn.started
  3. 003turn.decision_recorded
  4. 004output.held
event_id
evt_01J7C2P
project_id
support_ops
privacy.mode
metadata_only

Start with one governed workflow.

A focused design-partner pilot can move from scope to evaluation in 30-45 days.

  1. 01

    Scope

    Choose one consequential workflow, its owners, and the decision boundary.

  2. 02

    Map

    Define the policy references, review states, and evidence the team needs.

  3. 03

    Connect

    Instrument lifecycle metadata with project-bound credentials.

  4. 04

    Evaluate

    Review the operating record, adoption path, and production readiness together.

Clear boundaries before broader deployment.

We describe the product by its current operating boundaries, not by a future-state checklist.

BoundaryCurrent behaviorStatus
Tenant scopeOrganization membership scopes customer access; projects and environments partition Replay data and credentials.Implemented
Credential handlingReplay credentials are project-bound and environment-aware.Implemented
Replay privacyThe Replay contract accepts strict lifecycle metadata, not message content.Implemented
Event historyAccepted Replay events are idempotent and append-only.Implemented
Enterprise design partner

Build the operating record around one real workflow.

Bring the workflow, its decision boundary, and the evidence your team needs. We will scope the pilot together.

Request an enterprise pilot