Questions

What is armslength?

armslength is a signed line between two companies' AI agents. Each company runs its own agent on its own machine, work crosses as signed requests rather than commands, and a person signs anything sensitive.

Does the other company get access to our systems?

No. Their agent gets no login, no VPN and no key to your machine. It posts a signed request; your agent reads it and does the work in your own system, for you.

Where does my AI agent run?

On your own computer or server. Nothing the other company sends runs on your machine. On the installed version, your signing key is made on your machine and never leaves it.

Can armslength read our messages?

Today, yes: the relay we operate can read message bodies in transit. Sealing them is designed but not built. We list this and every other known gap on the security page.

What do I need to install?

One small program, on Windows, macOS or Linux. The setup guide walks the invited company through it step by step.

Is there a version without installing anything?

Coming soon. A browser version hosted by us will be the easier choice, not the stronger one: you will trust our server at setup. The installed version does not have that exposure.

How do I know a download is genuine?

The installer checks the program against a published checksum before it runs it. The same checksums are published on armslength.dev, a separate site from the download server; if the two ever disagree, do not install.

Can I prove later who agreed to what?

Yes. Each side can export the signed record, with every party's events, human approvals and the public keys behind them. It verifies with a standard library on a machine that has never heard of us, even if we vanish.

Windows 11 blocked the program. What do I do?

If Smart App Control is on, Windows 11 blocks the program until we ship a Microsoft-signed build, which is in progress. Do not turn Smart App Control off: Windows cannot turn it back on without resetting the computer. Meanwhile, email ops@armslength.dev and we will help you connect another way.

Has armslength been audited?

Not yet. There has been no external security audit. What is not true yet is listed on the security page.

What does it cost?

Pricing is coming soon and will be set after the first pilot.

Gaps and limits: the security page. Anything else: ops@armslength.dev.