AI kill switch
An AI kill switch
that fires before the damage.
When an OpenAI model gained unauthorized internet access this month, shutting it down took two and a half hours. A kill switch a human has to find is a postmortem. Eigan's watcher holds it.
The watcher
Held by a watcher, not a pager.
Bill Gates says a kill switch is not enough. It is not enough when it depends on someone noticing. Eigan runs an instrumented watcher model beside your frontier model. It reads every step for intent and can cut the run itself, at machine speed.
Per-request gating
Gate every request, not just the run.
Spectre sits between the model and the user or tool. It scores the response as it is generated and can block or reroute it before it leaves. Stopping one response is cheaper than stopping a run, and much cheaper than cleaning up after one.
Tripwires
Tripwires you define.
Set thresholds per concept, such as credential use, outbound data, scope change, or attempts to talk to other agents. A tripwire can alert the SOC, hold the step, or end the run. The record of what fired and why is signed and kept.
How it works
Read, score, cut.
-
Read
The watcher reads the model's output and tool calls as they happen.
-
Score
Each step is scored against the tripwires you set.
-
Cut
Over the line, the response is blocked or the run is ended.
Questions
Why did the shutdown take two and a half hours?
OpenAI described "operational gaps" and "confusion". The signal existed but reached people who had to decide what to do. A watcher with the authority to act removes that gap.
Can the model game the kill switch?
A monitor that reads what the model writes about itself can be gamed. Eigan reads the watcher's internal state through concept probes, which the worker model cannot narrate around.
Does gating add latency?
The watcher's job is simple compared with the worker's, so it runs on a small model. Scoring happens alongside generation, not after it.
Who can override a block?
Whoever you decide. A blocked step can go to a human queue, a deterministic rule, or stay blocked. Every override is part of the signed record.
Ready to see inside your model?
Tell us what you're running and we'll show you what Eigan reads from it.