Sentry stands in front of every model call — screening prompts, enforcing policy, and writing an immutable audit trail regulators can verify.
Aggregate metrics streamed from the Sentry Evidence Plane across all customer tenants. Refreshed every second.
Data plane isolated, control plane shared. If Evidence goes down, Gateway keeps serving traffic. If Policy goes down, Gateway serves on the last-known-good bundle. There is no single point at which observability breaks enforcement.
Horizontally scaled inline proxy in Go. +6ms p95 over direct provider calls. The only component on the hot path — memory-safe, stateless, region-local.
Versioned, content-addressable policy store. Author in SentryDSL, compile to bytecode, distribute to Gateway pods in under 15 seconds. Every version SHA-256 signed.
Append-only audit ledger on ClickHouse + S3. Every decision, prompt, response, and policy bundle — queryable by auditors, exportable to Snowflake and Databricks.
Observatory ingests every decision from Sentry's Evidence Plane and builds a Causal Trace Graph — prompt, context, retrieval, tools, response, user, and business action, all connected.
Every deploy ships with mapped controls, signed evidence, and reproducible policy versions. No spreadsheet gymnastics.
Signed audit bundles. Reproducible policies. Answers regulators can verify.