Security & governance
FINURA sits between models and bank systems so agents can propose — and only governed actions proceed.
Model output never authorises
Proposals inform the runtime. Policy gates, ActionGate, and optional human approval decide what may execute.
Tamper-evident trail
Every decision records policy version, evidence refs, risk score, and outcome for replay and verification.
Scoped API access
Pilot tokens stay full-scope. Demo tokens (PR A) are limited to read policies, submit/get refund decisions, and run goals — no execute, recall, delete, audit admin.
Separate demo tenant
Public /demo/* routes write only to an isolated demo schema, rate-limited per IP. Pilot data is never mixed.
What the public site never holds
GitHub Pages has no secrets store. The static site never embeds API tokens. Demo calls use public /demo/* routes or a short-lived token minted by GET /demo/bootstrap on the API (configured by operators — not committed to this repo).