Thundercloud Technology01
A tailored model
An open-weight model served from your own inference endpoint, with a persona, instructions and reasoning profile chosen for your work. Each client of the endpoint has its own key and its own usage meter.
Private model agents · Subscription
Your model.
Your rules.
An AI agent that runs on hardware you control, tailored to you, and reached from your phone. Every tool it uses is decided by Saturn under an agreement and policy you sign.
What the subscription covers
One agent, set up for you.
02
A chat on your phone
The agent appears in a tool-calling chat over your private network. Only your own signed-in devices reach it; nothing is published to the internet.
03
Signed authority
An agent agreement (its purpose, the tools it may use and the things it must never do), a fine-grained permission policy and a time-limited mandate, all signed by you in Terminalia.
How a tool call is decided
The model proposes. Saturn decides.
A short, fixed tool list
The model can only ask for the tools in its agreement. It cannot discover or load others.
Facts from the request, not the model
A separate enforcement point checks the arguments and works out the policy facts (which tool, how much, from where) itself.
A signed decision
Terminalia decides against your signed grants and returns a decision bound to those exact arguments, valid for at most a minute and usable once.
Exactly what was decided
The enforcement point runs those exact arguments and nothing else. If Terminalia cannot be reached, or anything does not match, the answer is no.
Security
Built for the ways agents go wrong.
Injected instructions
Text the model reads cannot widen its tools. Reads stay inside the limits you sign, and the agent cannot write anything on its own.
A compromised agent
Enforcement runs outside the agent, as a separate process that holds the agreement key. The agent itself holds no key and no credential.
Replayed or altered calls
Every decision is signed, bound to the exact arguments, short-lived and single-use.
Other devices on your network
An identity check in front of the chat admits only your own devices.
Runaway use
Rate limits in Terminalia, and per-minute and per-day budgets at the enforcement point.
Your data
Secret-shaped text is removed from tool output before the model sees it. The decision record is hash-chained and archived, encrypted, to your cloud store.
Stop it any time.
Revoke the agreement or a permission from your phone and the next call is refused. Stop the enforcement point and every tool stops while the chat goes on. When the mandate expires, so does the agent’s authority.