Software · in build · planned December 2026
For a company whose most valuable asset is its designs, process know-how, tenders or client files. The Semantic Gate puts everything bound for an external or self-hosted model through one governed path, decides what may leave, and keeps a signed record of each decision.
The gap
Confidentiality lives in the meaning of the text. The controls a company owns today check files, patterns and destinations, so a paraphrase passes every one of them. That is a gap in the category of control, not in the configuration.
| What current controls check | What actually leaks | Where it lands |
|---|---|---|
| File identity, access rights and classification labels | A process or pricing formula, rephrased in the user's own words | The vendor's context window, under its retention and training terms |
| Patterns: part numbers, keywords, formats | Fragments, each innocuous, that add up over a year | Personal devices, when blocking the tools pushes use there |
| Destinations: blocked domains and uploads | Know-how never written in a classifiable file | Nowhere any per-prompt review can see: exposure is a property of the set |
How it works
Ungoverned inputs
Everything bound for a model you run or a model you rent enters one path.
1 · The gate
The payload is tested in meaning-space against a constraint library authored and versioned separately. Not a keyword match.
2 · Verdict
Bounded by the declared constraints, not by the model's discretion. Non-compliance is held, not hoped against.
3 · Evidence
A signed, replayable record: the decision, the constraint version applied and the evidence behind it.
Two checks
Whether a payload falls inside the declared range of what may leave, against the versioned library. Available when the gate ships.
Whether distance from an authored reference tracks compliance. That is an empirical hypothesis, tested in a pre-registered experiment planned for the first half of 2028. If it fails, the range check stands.
Who it is for
Deal teams
The AI Confidentiality Exposure Assessment names the residual gap: paraphrase that passes every control the company owns. The gate is one class of control that closes it.
The confidentiality assessment →Operators
For manufacturers, miners and defence suppliers whose most valuable asset is how they do things, not a file.
For operators →Across many prompts
No single prompt shows it. The Aggregate Drift Service reads exposure across a window.
Aggregate Drift Service →Start with the finding
An assessment names which channels need a control that reads meaning, and what the company could show without one. Most channels close with settings and contract terms. Whether to add the gate, and where, is yours to decide on the findings.