TRACSTON IMPERIUM
CONTROL PLANE // INTERACTIVE DEMO
TRUST DOMAINCUSTOMER INFRASTRUCTURE
IMPERIUM
Tracston Imperium — the AI workspace and the AI control plane

Work with AI. Without losing control.

One AI workspace for people. One AI control plane for the organisation. Imperium is where employees work with AI — approved models, agents, documents, memory and history in one place — and the environment the organisation uses to discover, govern, decide, control, observe, verify, optimize, protect and execute. It is not an AI proxy, a model router, an API gateway, a cost dashboard, an agent inventory or a policy engine; Imperium Sentinel independently protects it.

FOR EMPLOYEESa better way to work with AI
FOR MANAGERSvisibility, cost and productivity
FOR SECURITY / ITpolicy, identity, enforcement and evidence

YOUR AI WORKSPACE

Work with AI. Without losing control. Employees should not need five different AI products, separate histories, different prompts and unmanaged credentials. Imperium gives each user one governed workspace for the AI tools, models and agents they are allowed to use — and the organisation keeps policy, identity, security and cost.

ASKCREATEANALYSECODERESEARCHSUMMARISECOMPAREAUTOMATE

PERSONAL AI HOME

RECENT WORK

Conversations, tasks and documents you were last working on — across every model you are allowed to use.

SAVED

Saved prompts, workflows, agents, reports, documents, searches and views.

APPROVALS

What is waiting for you, and what you asked someone else to approve.

AGENTS

Your agents and the role agents you may use, with what each can do, which models and tools it has, which data it can access, what needs approval and what it costs.

USAGE & BUDGET

What your AI work cost today and this month, and where it can cost less.

MEMORY & INSTRUCTIONS

What Imperium remembers for you and how you want it to answer.

Useful to someone who is not security, DevOps, IT or an AI administrator. The manager dashboard is a different view — employees are not shown enterprise-security noise.

USE THE RIGHT AI — WITHOUT CHANGING WORKSPACE

Approved access to OpenAI, Anthropic, Google, Microsoft, local models, Ollama, vLLM, internal and specialised organisational models. The employee never manages provider credentials — Imperium brokers them per request and the authority expires.

Depending on policy a user may choose a model, let Imperium select one, compare several, use the organisation-recommended model, or use a local model for sensitive data. Ask once, compare across models, and see quality, latency, cost and policy eligibility side by side.

PERSONAL INSTRUCTIONS & MEMORY

My AI instructions — writing style, output format, language, technical depth, preferred terminology, formatting to avoid, "always include implementation notes", "prefer concise responses". Inherited organisation → department → team → user: personal preferences extend policy, they never override mandatory organisational controls.

MY SETTINGINHERITEDLOCKED BY ORGANISATION

My memory — projects, preferred formats, working context, frequently used systems, approved recurring instructions, team terminology. Memory stays visible, scoped, editable according to policy, auditable, classified and governed. This is a productivity feature, not hidden behavioural profiling.

Organisational knowledge — personal → team → department → organisational memory, always policy-controlled. A finance employee asking "explain the current purchasing approval process" gets the finance policy, the internal runbook and their approved memory — and nothing from unrelated departments.

DOCUMENTS · VOICE · COMMUNICATION

AI doesn't only read prompts. A PDF, a scan, a screenshot, an image, an email, a WhatsApp message or a voice recording all enter through the same ingestion boundary — and leave it as governed content.

PDFSCANSCREENSHOTIMAGEEMAILWHATSAPPVOICE
INGESTION BOUNDARY
TEXTENTITIESCLASSIFICATIONPROVENANCEPOLICY
EVERY INPUT. ONE GOVERNANCE MODEL.
OCR COMPLETE
CLASSIFICATIONCONFIDENTIAL
SOURCELEGAL CONTRACT
TRUSTVERIFIED DOCUMENT

The extracted content joins the request trace — same classification, same provenance, same policy path as typed text.

Conversations are AI input too. A waveform becomes a transcript, the transcript becomes conversation nodes, and Imperium identifies PII, policy violations, quality, the agent's own responses and escalation — with WhatsApp, email, Telegram and chat feeding the same communication surface.

Drop a document. Ask questions. Keep governance. PDFs, scans, images and pasted screenshots are extracted, classified and made available to approved AI under the same policy path as ordinary text.

Where enabled, employees can upload a recording to transcribe a call, summarise a meeting, extract tasks, check it against policy and create follow-up actions. Where integrations are authorised — email, WhatsApp, Telegram, Teams, Slack, chat — Imperium can summarise a conversation, extract actions, draft a reply, identify decisions, find unresolved questions and search historical context, all within organisational access policy.

CODE WORKSPACE

Developers get approved coding models, code agents, repository context, MCP, GitHub / GitLab, prompt history, cost and token optimisation, visible agent actions and visible policy. When something is not allowed, the answer says why — and what will work instead.

POLICY SHOULD GUIDE, NOT ONLY BLOCK

BAD EXPERIENCEDENIED.
BETTER EXPERIENCEExternal GPT is not permitted for Confidential data.→ USE INTERNAL LLAMA→ REDACT SENSITIVE FIELDS→ REQUEST APPROVAL

Policy-aware rerouting: rather than only blocking, Imperium can route the request to an approved internal model and say so — "this request contains Confidential data; Imperium routed it to your approved internal model." Employee value and security at the same time.

UNDERSTAND WHAT YOUR AI DID

For their own permitted activity, users can inspect the prompt, the model, the tools, the sources, the agent actions, the cost, the latency, the approvals — and why a request was blocked or why a different model was selected. Transparency becomes user value, not only an administrator investigation tool.

THIS ANSWER USED: 3 internal sources · 1 external source
TRUST: MEDIUM — one external source is unverified.
· Potential unsupported claim detected in paragraph 2.
· This answer strongly mirrors your assumption — would you like an alternative interpretation?

Imperium Judge works for the employee too: compare answers, check quality, ask for a second opinion, verify against sources, check policy. Two model answers are compared on factual support, completeness, policy, source quality and cost — and the user makes the final choice.

YOUR AI USAGE

TODAY€9.42
THIS MONTH€148 / €250
CONTEXT OPTIMISED81K → 24K · 70%
SUGGESTIONuse local Llama here

Shown where policy allows, framed as awareness — not punishment. Token optimisation is visible value: the same task, lower latency, lower cost.

MY AI HISTORY & SAVED WORK

Search your own AI work by conversation, project, agent, model, tool, document or date. Nobody should have to remember whether something was in Claude, ChatGPT or Gemini — Imperium is the unified organisational history layer. Saved prompts, workflows, agents, reports, documents, searches and views live beside it.

ROLE-SPECIFIC WORKSPACES

DEVELOPERcode agents · Git · MCP · build · deploy
HRdocuments · candidate data · HR agent · OCR · approvals
LEGALcontracts · legal agent · sources · evidence · external-send approval
FINANCEERP · finance agent · reports · budgets · transactions
EXECUTIVEsummaries · reports · decisions · approvals · organisational views

Same control plane. Different work experience.

TRANSPARENT GOVERNANCE

Employees can see what is inspected, what is retained, which policy applies, why something was blocked, what their own AI activity costs and which data classification applies. Imperium does not imply — and does not default to — screen recording, keystroke monitoring or secret employee profiling.

AI traffic inspection and conversation retention are separate things. Inspection is what the gateway evaluates in order to decide; retention is what is kept afterwards, configurable by application, department, classification, purpose and policy. Regulated organisations can keep more; everyone else does not have to.

Imperium is not another AI chatbot. The workspace is the employee interface to the wider control plane — the same governed platform powers employee AI, agents, models, MCP, actions, data, security, cost and evidence.

Real screen

One view of the AI estate.

Models, agents, providers, usage, security, policy and cost — in one operational view.

PERSISTENT SESSIONS

A session belongs to the organisation, not to the window it was opened in. It survives a closed laptop, a dropped connection, a different machine and the next morning.

ACTIVEINCOMPLETEWAITINGBLOCKEDAPPROVAL REQUIREDCOMPLETED
VS CODETERMINALWEBMOBILENEXT DAY

An incomplete session stores its summary, completed work, open work, files, artifacts, tools, decisions and next steps — the resume package. Reopening it anywhere restores the same context and history. See it move →

CROSS-MODEL HANDOFF

The work is not the model. A session can be handed from one model or agent to another — Claude to GPT to a DevOps agent — and the context package follows it, along with identity, policy, trust and evidence. The model may change. The session does not.

IDENTITY BEYOND USERS

Every actor has an identity — human, machine, service, agent, sub-agent, workflow, MCP — and every identity carries an owner, a scope, permissions, data access, tools, actions and a budget.

DELEGATED AUTHORITY

Agents should not inherit everything. Authority narrows at every hop, and the narrowing is enforced, not advisory:

USER · 12 permissionsAGENT · 7SUB-AGENT · 3TOOL · 1

Delegate only what is required. See the chain of authority →

WHEN AN AGENT CREATES ANOTHER

An agent does not simply spin up a helper of its own accord. Before a sub-agent exists, the organisation's controls apply to it too — what it is for, what it may reach and whether a person needs to approve it. The result is that a chain of agents cannot quietly acquire more authority than the person who started the work.

ACCESS FOR A TASK, NOT FOREVER

Agents should not hold permanent secrets. Access is granted for the work in hand and withdrawn afterwards, and provider credentials stay with the organisation rather than being handed to clients or written into prompts.

WHAT CAN IT SEE? WHAT CAN IT DO?

The two questions every security review actually asks, answered per agent — data sources on one side, action verbs on the other, each marked allowed, approval-required or denied. See the split →

FLOW INTELLIGENCE · AI FLIGHT RECORDER

Don't just know that something happened — know how. The flight recorder reconstructs an execution as a graph and replays it through time: nodes appear and disappear, authority changes, data paths reverse. Seven lenses read the same timeline differently.

EXECUTIONwho called whom
AUTHORITYwho delegated what
DATAwhat information moved
TRUSThow trust changed
POLICYwhere policy evaluated
COSTwhere tokens, API and GPU were spent
RISKwhere blast radius increased

EXPECTED VS ACTUAL FLOW

Every governed execution has an expected shape. When the actual path deviates — an unknown sub-agent, an unapproved MCP, an external API that was never in the plan — the deviation is the finding, not a log line to grep for later.

EXPECTED: USER → AGENT → APPROVED MCP → TOOL → APPROVAL → ACTION
ACTUAL: USER → AGENT → UNKNOWN SUB-AGENT → UNKNOWN MCP → EXTERNAL API

FLOW DEVIATION · RISK HIGH. Open the flight recorder →

SAME CONTROL PLANE. DIFFERENT WORK.

Imperium understands different organisational flows without becoming a department-specific product.

FROM DECISION TO EXECUTION

A decision is not the end. Governance continues after it — through a durable workflow that survives waiting, approval, failure and rollback.

COLLECT STATECHECK DEPENDENCIESREQUEST APPROVALWAITAPPROVEDRESTARTVERIFY HEALTHROLLBACK IF FAILEDCAPTURE EVIDENCE

WORKFLOW DESIGNER

Build a governed workflow visually: the steps, who approves what, and what happens if something fails. The same workflow can be kept alongside the rest of your infrastructure definitions.

CHECKAPPROVEACTVERIFYRECOVERRECORD

KNOWLEDGE WRITE-BACK

The first time, an AI investigates. Once the fix is reviewed and approved, the dynamic path becomes a deterministic runbook — and the next identical event runs the workflow first. AI solves it once. Automation remembers how.

REALITY GRAPH

Topology says what is connected. The authority graph says who may act. The reality graph connects AI execution to organisational and infrastructure reality — so a question like "what actually changed because of this request?" has an answer.

NODES

humanagentsub-agentmodeltoolMCPdataapplicationservicehostcredentialpolicyactionoutcome

EDGES

REQUESTEDDELEGATEDREADCALLEDWROTEMODIFIEDAPPROVEDBLOCKED

Not a tenth capability domain — a way of reading the nine. The flight recorder is its time axis →

ASK MY WORK

Unified history only matters if you can interrogate it. Inside the personal workspace, plain questions work:

"What did I leave unfinished?""Show all sessions related to Project Atlas.""What did the agent change yesterday?""Which approvals are waiting for me?""Where did we decide this?"

Answers are bounded by the same policy as everything else — you can ask about your own work and what your scope permits, not about someone else's.

BEHAVIOURAL ASSURANCE

Models and agents drift. Imperium measures it rather than assuming it away.

HALLUCINATION3.1%
SYCOPHANCY+31%
AGENT DRIFTbaseline +31%
MODEL DRIFT1.4%
INSTRUCTION DRIFTv14 → v15
AUTHORITY DRIFT+2 permissions

Example: agent baseline deviation +31% → REVIEW REQUIRED. Tracked per model, agent, version, department, use case, provider and time; the response ladder can alert, review, reduce autonomy, block or roll back instructions.

IMPERIUM JUDGE

A user can compare answers, verify sources, ask for a second opinion, check policy and check completeness. The judge evaluates source support, consistency, completeness, policy and cost — and is presented as evidence for a human decision, never as absolute truth.

STORAGE FORECAST

Session history, files, artifacts, audio, OCR, traces and evidence each carry retention, archive, compression, delete and quota policy — and the forecast is shown before the failure, not after:

STORAGE93% used
FORECASTFULL IN 18 DAYS
RECOMMENDEDarchive old sessions
PROTECTEDevidence retained

QUOTA · STORAGE · MEMORY

QUOTA HIERARCHY

Tokens, requests, cost, storage, files, artifacts, memory, logs, GPU and concurrent jobs — bounded at every level:

GLOBALDEPARTMENTPROJECTUSERAGENTSESSION

STORAGE GOVERNANCE

History, files, artifacts, embeddings, audio, OCR, logs and evidence each have retention, archive, compression, cleanup and quota policy. As pressure rises Imperium degrades in a controlled order — archive old sessions, compress artifacts, move evidence to cold storage, reduce trace retention — and never silently drops the evidence that matters. Resource control before resource failure.

SCOPED MEMORY

ORGANISATIONpartial
DEPARTMENT✓
TEAM✓
USER✓

The current request reaches user, team and department memory and part of organisational knowledge. Another department's memory stays locked — scope is a property of the memory, not a filter applied afterwards.

PERSONAL INSTRUCTIONS · RESPONSE TYPES · VIEW LEVELS

ORGANISATION"Never expose confidential customer data."
DEPARTMENT"Use Finance terminology."
USER"Keep answers concise."

Personal. Without overriding policy. Instructions stack downward; the mandatory ones cannot be relaxed.

RESPONSE TYPES

The same answer, reorganised for who is reading it — EXECUTIVE (summary, risk, decision), DEVELOPER (implementation, API, code), SHORT (three lines), DETAILED (full analysis).

VIEW LEVELS

FOCUSED fewer menus, fewer metrics, guided explanations · STANDARD · ADVANCED full controls, deep trace, policy details, raw evidence. The platform adapts to the user. The policy does not.

BRING YOUR OWN KEY

An organisation or an external user can bring their own provider key. It enters the Imperium vault and everything downstream still applies — quota, policy, audit, DLP and session history — before the request reaches the provider. Your key. Your provider. Our governance.

PROVIDER KEYIMPERIUM VAULTQUOTA · POLICY · AUDIT · DLP · SESSION HISTORYPROVIDER

THE WORK DOESN'T END WITH THE ANSWER

A project session holds more than a conversation: human comments, agent runs, a wiki entry, a reminder, a task, a bulletin — all referencing the same context. When a session completes, Imperium offers to save to wiki, create a runbook, create a task, create a reminder or share with the team, so what was learned becomes organisational knowledge instead of a chat log.

NINE CAPABILITY DOMAINS

A framework for evaluating organisational AI control. These are capability domains, not processing stages — discovery and verification run continuously, protection is cross-cutting, execution is durable.

01DISCOVERImperium continuously identifies the AI already in use across the organisation and maps it to owners, teams and governance scope.

Models, agents, sub-agents, AI clients, coding assistants, connected systems, tools, providers, private and local models, browser AI and automation — found continuously rather than surveyed once, and each given an owner and a policy.

02GOVERNOrganisational policy applies consistently across teams, people and agents, with controlled delegation.

Set organisation-wide boundaries, then delegate appropriate controls to teams and applications. Local flexibility remains within the limits the organisation established.

03DECIDEImperium selects an appropriate permitted path for a task, based on configured constraints and available resources.

A request may use an approved private model, wait for capacity, require approval, or stop when no safe path exists.

04CONTROLPeople and agents reach models, tools and systems through Imperium rather than holding uncontrolled authority of their own.

Access is granted for a task rather than held permanently, and provider credentials stay with the organisation instead of being distributed to clients.

05OBSERVEWhat AI actually did is recorded — from the request through the agents, models and tools to the action.

Sessions, traces and history that answer who initiated work, what took part in it, and what it cost.

06VERIFYInformation carries its origin and classification, and behaviour is checked for change over time.

Answers inherit the standing of their sources; hallucination, agreement bias and drift are measured per model and per agent so autonomy can be reduced when behaviour moves.

07OPTIMIZEWhat AI work consumes is attributable, and can be reduced without weakening controls.

Usage and cost belong to a department, a project, a person and a piece of work. Context can be reduced substantially while classification and controls stay exactly as they were.

08PROTECTConsequential actions are checked before they execute, not reported afterwards.

Sensitive content, external destinations and privileged actions meet the action gate first. Unknown agents do not get to act.

09EXECUTEApproved outcomes continue as durable, governed workflows.

Work that waits for a person, fails, or needs reversing stays governed throughout — and a resolution can be reviewed, approved and reused.

How each of these is implemented — evaluation logic, policy model, credential handling, connector internals and deployment characteristics — is covered in a technical discovery session rather than published here.

A REPRESENTATIVE REQUEST

IDENTITYCLASSIFICATIONPOLICY EVALUATIONONTOLOGY CONTEXTDECISION OPTIMIZERROUTE SELECTIONCONTEXT ASSEMBLY · trust propagation beginsEXECUTION · model / MCP / toolOUTPUT TRUST EVALUATIONACTION GATEALLOW / BLOCK / REQUIRE APPROVALACTION EXECUTES ONLY IF AUTHORIZEDEVIDENCE SEALED

The only animated request sequence on this site is the representative trace. The capability domains above are not stages.

Real screen

Policy that follows the organisation.

Global controls with department, team and user inheritance and controlled overrides.

Real screen

Control every agent.

Owner, department, model, tools, MCP, authority, cost, drift, hallucination, sycophancy and status — with open, block, pause, quarantine, uninstall, view history and view flight recorder on every row.

ZERO-FRICTION ONBOARDING

Open your account → DOWNLOADS & INSTALLATIONS → select the Imperium endpoint component and platform → download a package or copy a one-line command carrying the registration token, organisation context, installation target and policy bootstrap.

DOWNLOADRUN ONE COMMANDREGISTERDISCOVERPOLICY APPLIEDMONITORING STARTS

AUTOMATIC AGENT PUSH · INSTALL

DISCOVER HOSTCHOOSE INSTALL METHODPUSH ENDPOINT COMPONENTREGISTERVERIFYAPPLY POLICYSTART MONITORING

Methods: an existing endpoint sensor, SSH, WinRM / WMI, cloud APIs, Kubernetes, approved credentials, download token. Never without customer authorisation.

MANAGER DASHBOARDS · SAVED VIEWS

Multiple dashboards, dynamic widgets, saved, personal, department, executive, published, role-based, tenant and project views. A CISO, CFO, CTO, DevOps lead, AI platform manager and department manager each see what is relevant to them.

MOBILE MANAGEMENT

Executive status, alerts, approvals, incidents, agent status, costs, Sentinel alerts, notifications and critical actions on iPhone, Android, iPad and large Android tablets — not a replica of the desktop console.

INTERACTIVE DEMO

Eleven scenarios, the policy inheritance model, the approval gate, cost attribution, the GPU scheduler and local-AI routing. Run the interactive demo →

SECURITY BOUNDARY

Imperium is the boundary between everything that asks and every AI that answers. Imperium Sentinel — an independent security product and trust domain — protects the control plane itself: Security →

DEPLOYMENT

APPLIANCEautoinstall ISO or packages; native services; no container runtime required
PRIVATE CLOUDyour tenancy, your keys
AIR-GAPPEDoffline models, offline install, signed updates
GUIDED INSTALLATIONa bootstrap on an approved workstation validates the environment and deploys a dedicated appliance — see Deployment
← Back to the experienceRequest an enterprise demo