Authority
Permissions live on the server
Scope, approvals, host access, Stop and credentials are decided by the control plane on every action. No tool, skill, profile or delegation can widen them.
Gravity Ops · Private preview
Autonomy
with gravity.
Gravity Ops is the control plane for AI‑assisted infrastructure operations. Agents do the work across your fleet. Permissions, approvals and every effect stay anchored at the center.
Scroll to enter the field
- Source of truth
- PostgreSQL
- Blind replays
- 0
- Gateway platforms
- Windows · Linux · macOS
The problem
AI can already run a command. Running operations is harder. Someone has to know who allowed it, which exact machine it touched, what happened when the connection dropped, and whether trying again is safe. Gravity Ops keeps that answer for every action.
The control plane
Agents move. The center holds.
Every conversation, plan, job and result lives in one durable control plane. Agents act at the edge. Authority never leaves the center.
Durability
Work survives restarts
PostgreSQL is the source of truth. Leases, fencing, idempotent jobs and a transactional outbox keep work moving through restarts and dropped connections.
Uncertain effects
Nothing is replayed blind
When an action may have run but its result was lost, Gravity Ops marks it uncertain and observes the target. It never runs it again on a guess.
How it works
Approve the goal once. Follow every step.
An approved plan lets the agent pursue its goal on its own, inside the scope and permissions you already have. It grants nothing more.
-
01
Ask
Describe the objective in a conversation, in your own words, from the console, your phone, Telegram or a schedule.
-
02
Plan
The agent proposes a work plan with a goal, success criteria and impact. You approve that revision once. A plan on its own never executes.
-
03
Execute
The agent picks commands, tools and routes. The Gateway runs them on the exact target, and every action is checked for authority, Stop and generation before it leaves.
-
04
Settle
Results come back as durable evidence. Anything indeterminate stays flagged across runs and restarts until it is verified on the target.
You
Rotate the TLS certificates on edge-lb-01 to edge-lb-04 before Friday. Keep traffic up.
scope · 4 hosts
route · gw-paris-2
source · console
Gravity
Reading certificate paths and load-balancer health checks on the four hosts.
ssh edge-lb-01 · read /etc/haproxy/haproxy.cfg · nominal
Work plan rev 3
Every edge load balancer serves the new certificate, with no dropped connections.
- Serial 4A:1F:9C is served on all four hosts
- Each node is drained before it changes
- Health checks pass before the next node
sha256 9f3c…a1e2 · msg #218
Approve goal
Request changes
- 08:14:02edge-lb-01drainnominal
- 08:14:09edge-lb-01install certnominal
- 08:14:11edge-lb-01health checknominal
- 08:14:20edge-lb-02drainnominal
- 08:14:26edge-lb-02install certrunning
Checked before dispatch: target, grant, Stop, generation
Stop
- 08:15:40edge-lb-03install certnominal
- 08:16:02edge-lb-04install certuncertain
Connection lost after dispatch. The effect is unknown, so it is not replayed. Observing the target.
- 08:16:31edge-lb-04observe serial4A:1F:9C
Verified on the host. Settled as nominal. Objective complete on 4 of 4 hosts, evidence kept.
Gateway
One Gateway. Every platform.
A small .NET agent runs next to your machines and executes on their behalf. Platform-specific behavior lives behind providers, so the core stays identical everywhere.
- Windows
- Linux
- macOS
- Containers
- Local state
- SQLite keeps execution, result delivery and control-plane integration apart. A success stays a success, even when delivering it fails.
- Fencing
- Every command attempt is fenced. A stale attempt cannot overwrite newer work.
- Updates
- Drain, stage, activate, health-check, roll back. A containerized Gateway is replaced by its orchestrator instead of updating itself.
Capabilities
Everything your operations orbit around.
Agents & Orchestrator
Specialist agents with their own projects and tools, coordinated by one orchestrator.
Automations
Schedules, event hooks and webhooks that wake durable work instead of firing one-off scripts.
Topology
A live map of networks, machines, applications and virtualization, built from inventory.
Host terminal
A real interactive terminal to any host, Windows or Unix, straight from the browser.
Scripts catalog
Versioned scripts, published explicitly and run through the Gateway.
Skills
Domain guides loaded on demand. They add expertise and never grant authority.
Connectors
Telegram, HTTP and SMTP, in and out. Messages start work and agents answer.
Reports
Published editions are corrected by a new edition, never edited in place.
Mobile
Approve, stop and follow work from your phone.
Cost per turn
Every turn and conversation priced in USD at the moment it is recorded.
Model certification
Models are certified against the real tool catalog before they touch your fleet.
Live sharing
Share a running conversation as a read-only view, limited to what you choose.
Security
The server is authoritative.
The model proposes and executes. It never decides what it is allowed to do.
- Permissions
- Evaluated on the server for every action.
- Scope
- The exact target, never “the fleet”.
- Approvals
- Bound to a plan revision and its digest.
- Host access
- Routes are resolved and validated at dispatch.
- Stop
- Stop and generation are checked on every admission.
- Credentials
- Opaque references. The model never sees a secret.
No tool, skill, profile or delegation can widen permissions.
Gravity Labs
We build the center of mass for autonomous operations.
Gravity Labs is an engineering company. We build tools that let teams trust autonomous systems with real infrastructure work. Gravity Ops is our first product.
- Correct before fast.
- Durable before clever.
- Authority before autonomy.
Private preview
Bring your fleet into orbit.
Gravity Ops is in private preview with a small number of infrastructure teams. Tell us about your environment and we will plan a guided pilot with you.