Neural Inverse Build / Agents
Delegate work to agents. A person approves what matters.
A desktop app for running agent sessions in parallel and reviewing their changes, under the same policy as the rest of your team.
- Part of
- Neural Inverse Build
- Platforms
- macOS, Windows and Linux
- Engines
- Claude Code, Codex and our own
- Sessions
- Several in parallel
- Record
- Every session, prompt and tool call
Overview
The Agents app is where engineers hand work to AI agents. Each session runs in a shared agent host under your organisation's policy, every action is decided before it runs, and every change waits as a diff for a person to review and keep.
What it does
What the Agents app does.
Several agents at work at once, each one governed and each one on record.
Parallel sessionsStart a session in a workspace, choose a model and describe the task. Start more while the first one works; each is listed with its own chat and changes.
Review changesThe Changes tab shows every file a session changed, as diffs, with a detail panel for the branch's changes and checks. Keeping a change is a governed action of its own.
Choice of engineSessions run in a shared agent host that can run several engines: Claude Code, Codex and Neural Inverse's own engine.
Policy translated per engineFor Claude Code, organisation rules become its permission rules, bypass mode is turned off and denied MCP servers are removed. For Codex, rules set its approval policy, sandbox mode and network access.
Decided before each callWhatever an engine's own settings cannot express is decided live, before each tool call.
Stated enforcementEach engine version has a table of what it can enforce. A rule it cannot enforce is reported, never dropped, and a mandatory one blocks that engine for the session.
Recorded without modifying enginesEvery engine's sessions, prompts and tool calls are recorded in the device's audit ledger through the engine's own hooks.
AutomationsSchedule agent sessions on an agent host, or start them by hand.
Key workflow
Start, run in parallel, approve, review, keep.
- Sign inTo your organisation's Govern deployment, with your own account.
- Start a sessionChoose a workspace and a model, and describe the task.
- Run in parallelStart more sessions while the first one works.
- ApproveActions your policy marks wait for a person before they run.
- ReviewOpen Changes and read every file the agent changed, as diffs.
- KeepAccepting the changes is decided by the same governance service.
Who uses it
Built for every role on the team.
EngineersDelegate tasks, run several sessions at once and review each diff before keeping it.
Security teamsSet which engines may run and what they may call, read, write and reach, through one signed policy.
Platform teamsRoll the app out with managed policy, using the same policies as the Editor.
Compliance teamsRead a record of every engine's sessions, prompts and tool calls, and the approvals behind them.
How it is governed
Every agent action is decided before it runs.
One decision point for every engine the agent host runs, and it wins over each engine's own settings.
Allow, deny or needs approvalThe decision point decides each action: the tool, each shell command after full parsing, each file read or written, each host contacted and each MCP server.
ApprovalsWhen an action needs approval you are asked before it runs. Where an approval rule such as separation of duties applies, other enrolled approvers must sign.
Built-in protectionEven with no organisation policy, an agent cannot change policy and approval records, git hooks, CI configuration, shell profiles or audit data without a person.
Signed policy on every engineThe organisation's signed policy is verified on the device and applied to every engine. When it lapses past its offline grace, agent sessions, tool calls and model calls lock.
Audit on the deviceAgent events stay in the device's ledger unless your organisation turns on uploading to its own Govern deployment.
Stated limitsA modified build, or an engine run outside the agent host, is not covered by the device's controls. What must hold is enforced by Govern and your CI.
Technical facts
For your IT and security review.
PlatformsmacOS, Windows and Linux. Named Neural Inverse Agents on your system; installed with the Editor, with its own process, data folder and sign-in session.
Sign-inYour organisation account on your organisation's Govern deployment: in the browser with OAuth 2.0 and PKCE, or with a device code (RFC 8628) on a machine with no browser. The session is kept in the operating system's credential store.
Its own clientThe Agents app signs in with its own OAuth client, so its sessions, its entry in your device list and its audit records are its own.
Managed policyThe same managed policies as the Editor, including the address of your Govern deployment.
ModelsYour organisation's models through Govern with your own sign-in, providers your organisation allows, or local models. Shared with the Editor.
Without internet accessLocal models need no key, Govern can be self-hosted on premises, and policy is decided on the device with no Neural Inverse server called. No telemetry is sent to Neural Inverse.
Licence and statusProprietary, under your agreement with Neural Inverse; source review under NDA. Pre-release: interfaces and data formats may change between versions.
Get started
Install, sign in and read the documentation.
Talk to our team.
Neural Inverse is available by request. We work with your engineering, security and procurement teams from the first conversation.