App
JAMARQ Guardrail
The approval inbox the other apps send their risky actions to.
Began 2026-03-15 as Guardrail by JAMARQ; carried the Tenra name from 2026-06-02 to 2026-10-02; Tauri since 2026-07-20.
Why it was built
An app that can send an email, post a reply or call an outside service on its own will eventually do one of those things wrong. The usual answer is a confirmation dialog inside each app, which every app implements differently and none of them records.
Guardrail takes that job away from the apps. Each outside action is sent to one inbox on the same machine, where it passes a written policy, waits for a person to allow or deny it, and is logged in a chain that cannot be edited afterwards. The decision goes back to the app that asked, with a reason.
At a glance
- Began
- 2026-03-15
- Status
- In use
- Runs as
- Tauri desktop app for macOS, with a secondary web surface
What it does today
Built and working
One review queue
Every request shows the app that sent it, the evidence it attached, the category of risk, and where the answer goes. Allow or deny with a short reason.
Policy before people
A deterministic policy runs first, so obviously safe or obviously forbidden requests never need a person. The rest wait.
An audit chain
Each decision is hashed against the one before it. A dashboard per source app shows what was asked, what was allowed, and what was refused.
Answers that reach the sender
Decisions go back over a callback with retries, so the app that asked can carry on or stop. Sentinel pastes the decision back into its case and checks it against the request.
A boundary for agents
The Tool Host boundary refuses sample agent requests outright: reading a secrets file, reading a private key, deleting a folder tree.
How it came to be
The development cycle
111 commits and 43 merged pull requests, as of 2026-10-05. Work went straight to the main branch until August 2026, when every change started going through a pull request.
2026-03-15
Scaffold and the runtime enforcement layer.
2026-05-06
External action review handoff, queued decisions, and callbacks with retry.
2026-05-29
Callbacks persisted so a restart does not lose an answer.
2026-07-02 to 07-07
Persistent queue, hardened audit, and policy-pack simulations for the research and planning apps.
2026-07-20 to 07-22
Tauri platform review, durable desktop intake, and a structured capability-review policy.
2026-08-25 to 08-28
Plain-language pass across the interface.
2026-10-01
Risk briefs from Sentinel in two versions. The two merged research apps dropped as separate sources.
2026-10-02
Renamed JAMARQ Guardrail, with the old identifiers migrated and retired.
Where it stands
Real, and not yet
- •The review inbox with allow and deny, reasons, policy simulation, callback retry, the hash-chained audit, exports, a dashboard per source app, and authenticated intake on the local loopback.
- •Used by Scout, Align, Assembly and Sentinel for proposals, replies, content and risk reviews.
Not built, or switched off
- The Tool Host boundary is the first version, with network tooling disabled.
- The web surface is secondary to the desktop app, and the mobile surface is reserved, not built.
How it is built
Under the hood
The pieces
- Shell
- Tauri desktop app for macOS, with a secondary web surface
- Stack
- React, Rust, SQLite
- Data
- On the machine it runs on, and nothing leaves it
- Intake
- Authenticated requests on the local loopback only
- Never
- Performs the action itself. It only answers yes or no
Works with
- JAMARQ Sentinel
One case from a question to an evidence-weighted risk call, with a person deciding anything that leaves the machine.
- JAMARQ Scout
Finds local businesses worth a call, shows the evidence, and works each one as a deal.
- JAMARQ Align
Google Business Profile work across many clients and locations, plus a measure of whether AI assistants name a business.
- JAMARQ Assembly
The workbench where posts and documents are drafted, shaped, reviewed and approved.
The service behind this
Need a tool like this for your own work?
Describe the job it would do and what you use today. You will hear back within one business day.