Describe what you need — a program, a workflow, or an agent — and RailCall composes it from a finite, pre-audited library, then runs it entirely on 127.0.0.1. Agents draft. You approve. Signed receipts prove it.
500 free flows · $0.01/flow after · no card · runs on 127.0.0.1
0 workflows · 0 receipts · policy enforced
{
"receipt_id": "rc_9f4c2e…",
"flow": "client_sync",
"actor": "sami@localhost",
"airlock_status": "SECURE",
"sockets": 0,
"integrity_root": "sha256:c4f1…",
"approver": "human · signed",
"signature": "ed25519:…",
"verified_offline": true
}See it in action
Watch a real governed flow — from describe to receipt — running entirely on 127.0.0.1. No cloud. No trust required.
The governed loop
Four steps, every time. Every write crosses all four — no exceptions.
Plug in your stack with your own keys. They live in a local 0600 vault on your disk — nothing transits our cloud.
Every change is computed with zero writes — a signed delta you can read before anything happens.
Nothing touches a customer, a record, or a dollar until a human says yes.
Every flow mints an Ed25519-signed receipt — independently verifiable, offline.
Efficient by architecture
Agent frameworks pay a token tax on every run — a frontier model re-derives the same logic each time. RailCall pays that thinking cost once: it composes from a finite, pre-audited library, then runs deterministically on your machine.
Same job, priced both ways · 10 workflows · one month
Frontier-model tokens for every line — generated, then regenerated when it drifts.
Compose once from a pre-audited library, then run locally — one flat price per flow, never per token.
Same 10 workflows. ~50× the bill on a raw token-metered agent framework. RailCall composes from pre-audited components and prices one flat flow instead of metering every token: $0.01 to run, $0 to rebuild.
Two governed pillars
Describe the program you need — RailCall composes it from a finite, pre-audited library and the integrations on your left rail, then runs it airlocked. One receipt for the build, one for every flow.
Point any LLM (your key) at a workflow. It drafts; RailCall composes the UI and logic strictly from license-clean, version-pinned components — never freehand code. If a piece doesn't exist, it says so. Every build ships a receipt.
Every action stages for approval, executes on your machine, and is measured with a per-flow lsof socket sweep. A stray socket fails the receipt and aborts a governed assembly — isolation is measured, never assumed.
The approval airlock
A governance matrix that closes at the smallest ambiguity. Any widening is itself a signed action.
Money movement, external customer messaging, external API writes — always requires a human. No policy can widen this without a signed receipt.
Ticket updates, CRM notes, tag changes. Default requires approval — policy can auto-approve within a scoped, signed rule.
Log annotations, internal notes, cache primes. Auto-approve when the delta stays inside the pre-audited component surface.
Ingest, decide, stage. Runs itself — the airlock computes a signed delta and mints an Ed25519 receipt for every write.
An agent can never loosen its own leash. A standing rule for where automatic ends — e.g. auto-approve reversible updates under a limit, always stop for anything irreversible or money — stages, gets approved, and lands as a signed receipt.
{
"policy_id": "pol_widen_01",
"widens": "F3.internal_notes",
"approver": "sami@localhost",
"signature": "ed25519:…"
}Pricing
Start free — 500 flows, no card. After that, a flat $0.01 per governed flow. No seats, no idle bills — you pay only for what you run.
Build your first governed workflow and verify a real receipt.
The whole product. Metered by the flow, never the seat.
Air-gap deployment, procurement-ready, dedicated support.
Bigger team? Same $0.01 / flow — plus scoped keys, a DPA & procurement on an enterprise contract. Talk to us →
FAQ
No asterisks. If we can't prove it, we don't claim it.
lsof or Wireshark.railcall verify <receipt> does it for you.500 free flows. No card. Runs on your machine. You own the code — even after you cancel.
or curl -fsSL https://railcall.ai/install.sh | bash