From database restore to a question for a human. Every night. Every step traceable.
No demo pipeline. This is the chain that runs every night against a day-fresh copy of a real back office — eight steps, four gates, one exit.
Most recent full run: 544/544 clients, 99,2% conforming, complete in 118,5 minutes.
The night cycle
8 steps · runs dailyThe full back office is restored as a day-fresh copy inside our own network. The system analyses reality as of yesterday evening — not an export from last month.
Documents and records are read and classified per object and period, in bulk on our own GPU. Personal data never leaves the network.
Before any analysis, recorded domain knowledge for that specific client is loaded — validated by the domain expert. Hard rule: the system is forbidden to ask a question the organisation has already answered.
Multiple models analyse independently; a pattern only becomes a signal when they agree. Output is enforced as strict JSON — reasoning text cannot leak into report fields. Final synthesis runs on Claude Fable 5, exclusively on anonymised data. More on cross-validation →
Sanity gates on every parse path: micro amounts, margins outside the bandwidth and empty actions are suppressed and logged. Such an artefact becomes a data check — never a signal to a manager.
Deterministic, before anything goes out: every action must be a question with an offer to help, addressed to a named person. Imperatives are blocked and returned for reformulation. AI never gives orders.
There is exactly one path to the outside world. Every message carries a mandatory destination and a verification block: amount plus source. No destination? Refused and logged. Nothing disappears silently.
Validated patterns are written back to the knowledge base at the end of each run. The next night, every agent knows them — step 03 reads what step 08 learned. Agents learn from each other, cumulatively, every night.

One night, measured
Figures from the full dress-rehearsal run, July 2026. Measured, not extrapolated.
50 blocked artefacts are 50 signals a manager never had to waste time on. A gate that stops things is the product working. See client cases →
What the mailroom refuses — and what passes


The knowledge circle is closed
A pattern confirmed at one client today is known knowledge for every agent tomorrow. And the answer a manager gives once, is never asked again.

Why you can trust this
After every change to the chain, a fixed set of ten clients — validated by the domain expert — runs again. Fails the set? The change does not ship.
A targeted test run is automatically routed to a separate environment: no state is persisted, no knowledge is written back. Test output cannot contaminate the knowledge base.
A hard reporting rule: no amount leaves the system without agent, file, timestamp and category. No trace, no publication — that rule also applies to this website.
Human or agent: every significant action is logged with actor and scope. Accountability is not a promise but a log line.
No black box. Every decision traceable. Every action waits for your GO.
See the engine room for yourself
The live dashboard shows what ran last night. The waitlist gets you the monthly under-the-hood updates.
Alongside the agents, GuardPilot works on an organisation's history and context. Fourteen days of production — counts, cases, working rules and incidents — are described openly and without names.
View context and history →