Hosted preview. Every run here is a recording of a real session. Live runs need the local server with Claude Code: get the code.

Runs

CapAuth issues a lease from the plan and checks every tool call.

Run summary

Pick a scenario and press Run task.

Agent identity-

Acting for-

Runtime-

StatusIdle

Lease-

Issued-

Time left-

TTL-

Policy ceiling-

Lease source-

The agent writes its plan before any tool call. Each step is ticked when its call is checked.

Only what the plan needs, signed, for the lease TTL. Everything else in the ceiling stays off.

Time	Decision	Call	Reason
Each tool call the agent makes lands here with its decision.

The ceiling per agent identity. The planner can only narrow it.