Read the code that enforces the controls.
The engine behind our platform is open source under Apache-2.0. Your security team can check how every action is guarded instead of taking our word for it.
Noodle Core
The TypeScript SDK, compiler, runtime, protocol layer, credential broker, CLI and self-host service. Run AI agents and the tools they use on your own infrastructure.
Noodle Core on GitHubStrand
The channel-independent interaction language and its checks. A capability that skips a read-back, leaves money untyped or an outcome without words cannot be published.
Readback
An open test suite for any AI that acts: payments that time out, outcomes it cannot prove, instructions hidden in a page, tokens passed through. Run it against your own AI agent.
Channel catalogue
What each channel can really do, from WhatsApp to Microsoft Teams: native components, limits and fallbacks, each citing the provider’s own page and the date it was read.
Controls open. Operations ours.
Everything that enforces a control
The language, the checks, the runtime, identity, permissions, confirmation, records and the credential broker.
What runs the business
The managed platform and portal, billing, distribution and organisation-wide governance tools, built on the open core.
Tell us what you need. We will suggest where to start.
Any layer, any size: a review, a project, a programme or a partnership.