Gated agentic operations

Agents do the work. You keep the decisions.

A team of AI agents on the operational work of your business — reading your systems, moving jobs forward, drafting what needs drafting — that stops at every act which cannot be undone, and asks you first.

A demo is five steps. Your month-end is two hundred.

Every agent product you have been shown works. That is not the question. The question is what happens when the same agent runs the same job four hundred times without you watching.

Reliability compounds downward. An agent that is right 95% of the time at each step finishes a ten-step job correctly six times in ten. At thirty steps it is right twice in ten. Nobody demos thirty steps.

How reliability compounds over the steps of a job Two curves against number of steps. Ungated, a 95%-per-step agent falls from 100% to about 8% correct over fifty steps. With a human gate every five steps, the curve resets at each gate and ends near 90%. 100% 75% 50% 25% 0% 0 10 20 30 40 50 steps in the job ~100% with a gate every 5 steps ~100% ungated
Both lines are the same agent at the same 95% per-step accuracy. The only difference is that somebody looks every five steps. Purple lines are gates; the gated curve assumes a reviewer catches 99 errors in 100. The shape is the point, not the decimals.

This is why Gibreen is built around the gate rather than around autonomy. A human checkpoint is not a training wheel that comes off later. It is the mechanism that turns a capable model into a dependable operation, and the arithmetic does not change when the models get better — it just moves the curve.

An operations layer, not another chat window

Four things, and it is honest about being only these four.

01

A team of named agents

Each one is a role with a written remit, a model, a list of systems it may reach and a list of things it may never do. Your bookkeeper agent cannot touch your sales pipeline, and the list is a file you can read.

02

A gate on every irreversible act

Sending, posting, paying, deleting, signing. The agent prepares the act, states what it will do and why, and waits. You approve, amend, or refuse — and the refusal is recorded with the same weight as the approval.

03

Connectors that respect your system

Agents read your ERP, your files and your mail. When they write, they write through the application's own logic, one record at a time — never a bulk script against the database underneath it.

04

A record a person can read

Every run, every question, every decision and every refusal lands in plain-text files under version control. No dashboard login required to audit it. Your compliance officer can read it in a text editor.

A morning, as the console sees it

Not a dashboard. A log a person can read, written as the agents work — and one line in purple where everything waits for you.

Illustrative run on our own books. What runs today and what is still in delivery is stated plainly in the table below.

Nothing is written behind your system's back

This is the commitment the rest of the product is arranged around, and it comes from an expensive lesson rather than from a whiteboard.

When software writes to an ERP through its API, the database constraints still run — but the logic the screen would have run does not. Choosing a customer on a form pulls their price list, their tax position, their payment terms and their delivery address. An API call that sets the same field pulls none of it. The record is created, nothing errors, and the numbers are quietly wrong.

Two ways an agent can write to a system of record Above: an agent writing straight to the database skips the application's own logic and produces an incomplete record. Below: the Gibreen path goes through the application's logic one record at a time, behind a human gate, producing a complete record. THE USUAL WAY Agent application logic skipped Database record incomplete ⚠ THE GIBREEN WAY Agent Human gate application logic runs, per record Database record complete ✓
The same write, two paths. The upper one is what "the agent has API access" usually means in practice.

We learned this the hard way on our own books, at a cost we would rather not repeat and will not let a client repeat. The full mechanism is on the How it works page.

One engine, three shapes of tenant

A person

A chief of staff that reads your mail, keeps your commitments visible and drafts what you would have written — and asks before it speaks in your name.

A founder

Delegate whole jobs, not prompts. The parts of the business you do badly at 11pm because there is nobody else to do them.

An organisation

Roles performed rather than tools provided: a bookkeeper, a follow-up officer, an analyst — each scoped, each gated, each auditable.

What changes between them is the gate, not the engine →

What is running today, and what is not

Most of this market describes what it intends to ship. Here is the line between the two, because you are going to find it anyway and it should come from us.

Status as of September 2026.
CapabilityStatusWhat that means
Scheduled agents, jobs, multi-step plansRunningIn daily production use on our own operations.
Human gates, questions, decision recordRunningIn use on our own operations daily. Refusals are kept alongside approvals.
Read connectors — ERP, files, mail, webRunningA closed vocabulary of read operations. Every call is logged.
Gated writes into OdooIn deliveryBuilt per engagement, per workflow, against your instance.
Per-tenant isolated instanceIn deliveryProvisioning is automated; each engagement is the proving run.
Mobile appPlannedApprovals on a phone. Designed, not built. Do not buy for this.
Voice and IVRPlannedApprove by phone call, and answer the phone as a role. Designed, not built.
Self-serve signupNot plannedDeliberately. See pricing.

If a supplier cannot tell you what their product does not do yet, you are not being sold software. You are being sold a forecast.

Start with a conversation, not a signup

Gibreen is not sold from a pricing table. Tell us which system of record you run and which job is eating your week, and we will tell you honestly whether this is a fit — including when it is not.

Goes to one mailbox in Amman. No list, no third party, no automated sequence.