Every answer carries its receipt.
One app for your whole org. Any model, theirs or yours. Your policies decide which one answers, and every reply shows its route, cost, and time.
Full 30-day trial at launch. No credit card.
The interface is the org’s territory. The model is a visitor.
People use personal chatbot accounts, paste company data into them, and carry per-team API keys nobody tracks. That leaves no answer to the question: “Who asked what, with which model, at what cost?”
muniment makes that question answerable: one governed surface, your keys, a record of every answer.
Public evidence
- Hugging Face CEO Clément Delangue says companies want to own their models, not rent them.
- Factory CTO Eno Reyes says enterprise model spend can reach tens or hundreds of millions of dollars, making automatic model routing the biggest saving for many.
- Uber Agentic Pods reports cutting a capital-allocation workflow from 15 hours to 30 minutes.
- DoorDash’s tiered reviewer reached 53.6% weighted recall and 87.0% weighted precision on its 105-case report.
01 route
Owners set the map. Users never pick a model.
An allowlist decides what people can install. muniment enforces entitlements and action policy when each action happens, then records the action as an audit event.
Policy matrix label target model fallback analysis/high claude-opus-5 gpt-5.2 drafting/standard gemini-2.5-flash gpt-5-mini summary/low qwen3-8b · org-vllm gemini-2.5-flash code/review gpt-5.2-codex claude-sonnet-4.6 voice/polish gemma-3n · on-device - 02 territory
Groups grant. Deny wins.
Access control that holds even when a client lies about who it is.
Effective permissions actor group scope effect scheduled work ana.ruiz finance vault:acme/finance grant next run uses virtual key ana.ruiz ana.ruiz contractors vault:acme/payroll deny revoked before next run marc.chen security logs:prod/incidents grant next run keeps user scope 03 record
Append-only. Every privileged decision, exportable.
Every answer carries an audit entry your systems can use.
SIEM-ready · JSON · CEF
analysis/high → claude-opus-5 · $0.0089 · 5.2s
- route
- analysis/
high - model
- claude-opus-5
- cost
- $0.0089
- duration
- 5.2s
- actor
- ana.ruiz
@acme.com - matched rule
- analysis-high
- connection / scope
- vault:
acme/ finance - export format
- JSON · CEF
One mode
No modes. No model picker.
One surface that scales from a question to an agent run. Color appears only when a model is working.
Your intelligence policy stays yours. The product enforces it as behavior, not a promise.
Recorded
vault:acme/finance
Verdigris means computation. It arrives when a tool runs and leaves the moment it finishes. Everything else stays ink on paper.
Voice, on device
Zero voice bytes leave the machine.
Dictation that cleans itself up, powered by models on the laptop, not an endpoint.
parakeet-tdt · ASR
Speech to text, on the workstation.
gemma-3n
Dictation cleanup before any prompt is routed.
kokoro-82m
Replies spoken locally from the desktop app.
Product family
Admin in the browser. Desktop on every workstation.
The same record-first interface across the owner console and the desktop app.
Coming to macOS · Windows · Linux · iOS · Android · browser extension.
Organization setup
Nothing to run.
Sign up, connect your identity provider, invite your org, install the app. Your provider keys are held encrypted in our vault and never ship to a device or route to model endpoints you already run.
Join the waitlistcreate org
You can sign up with your work email. You need no credit card.
connect IdP
Your organization can use SSO and SCIM, or email authentication.
install desktop app
You can install the desktop app on macOS, Windows, or Linux.