/////SAFETY & GOVERNANCE GUARANTEES
[01/01]
Safety & governance guarantees
Engineered for Safe Cost Automation
How ArthaOps is built to safely automate multi-cloud cost governance across AWS, Azure, GCP, and Kubernetes without breaking production.
100% AGENTLESS
Read-Only
Default Access Boundary
Discovery connects via strictly read-only multi-cloud federation (AWS STS, Azure ARM, GCP Workload Identity, K8s RBAC). Zero destructive permissions requested or granted.
TAMPER-EVIDENT
SHA-256
Hash-Chained Audit Trail
Every detected anomaly, verification proof, and optimization action is sealed into a tamper-evident SHA-256 hash chain, exportable for external SOC 2 audits.
REVERSIBLE BY DESIGN
1-Click
Deterministic Rollback
Every executed fix captures complete resource state snapshots prior to mutation, backed by verifiable 1-click rollback paths in the decision ledger.
SOVEREIGN CLOUD
ap-south-1
Sovereign Data Residency
Customer metadata resides strictly in AWS Mumbai (ap-south-1) with AES-256-GCM envelope encryption, compliant with India's DPDPA 2023.
//GOVERNANCE MATURITY EVALUATION // SPEC-REF: AO-CUST-TRUST-2026
FAIL-CLOSED SAFETY POSTURE
| CAPABILITY DIMENSION | TRADITIONAL TOOLS | ARTHAOPS ENGINE |
|---|---|---|
| Telemetry & Discovery | Batch periodic syncs, 24h stale data, manual CSV exports | Continuous scan-based, fingerprint-deduplicated telemetry across 378 detectors |
| Remediation Safety | Unverified bash scripts, high risk of production outage | Registry-controlled detectors, formal logic prover validation, 1-click deterministic rollback |
| Auditability & Compliance | Static PDF reports, zero cryptographic lineage | Tamper-evident SHA-256 hash-chained audit records, exportable for SOC 2 reviews and DPDPA audits |
| Credential Custody | Persistent API keys and root passwords stored in multi-tenant DB | Zero stored static keys; ephemeral STS AssumeRole sessions with instant revocation |
What We Are Not
- Not a simple cloud cost dashboard
- Not a generic FinOps reporting tool
- Not an unverified autonomous deletion bot
- Not a black-box APM daemon requiring cluster agents
What We Are
- Trusted Machine Authority for Multi-Cloud FinOps
- Safe Operational Delegation with Formal Verification
- Deterministic Reversible State Machine Remediation
- Forensic Governance Substrate with Cryptographic Proofs