AI Control and Evidence Layer
Vera CloudAI oS
AI that knows what it knows - and what it does not.
What it is
Vera sits between the AI a team already uses and the systems the business runs on. It decides what AI is allowed to change, and it keeps the evidence of what actually happened.
The usual pattern is to hand a model a prompt and trust the answer. Vera does something different: it separates evidence from interpretation, establishes where a piece of information came from, preserves what is known and what is still unknown, and keeps a recommendation separate from the authority to act on it.
It is not another model. Claude, ChatGPT, Gemini and whatever follows supply the intelligence. Vera is the layer underneath, where a decision turns into a change in a real system. The intelligence can be replaced. The organisational memory, the evidence, the governance and the accountability stay where they are.
Why it exists
AI has started doing the work rather than describing it - updating records, changing documents, sending messages, running processes that used to need a person. That is a different problem from getting a good answer. Once AI can change things, somebody has to decide how much authority it gets, and somebody has to be able to check the work.
Most teams answer that by keeping AI on a short leash and checking everything by hand. It works until the volume grows, and then it quietly stops working.
The three jobs, in the order they matter
Know. Company information changes constantly, and last year's document sits in Drive looking exactly as official as this year's. Vera marks what the company treats as current and what is history. It preserves where established information came from. Just as importantly, it keeps track of what it does not know - an unanswered question stays an unanswered question rather than quietly becoming an assumption.
Control. Every automated change is declared in advance - which system, which part of it, and which process owns it. Anything not on the list does not run, and something unrecognised stops the job rather than defaulting to allowed.
Verify. A success message is not proof. Vera confirms it is pointed at the right thing before it writes, compares what it meant to do against what the system reports afterwards, and records how strong each check was rather than treating every confirmation as equally good.
We learned this by getting it wrong
One of our own automated processes updated a management workbook every fifteen minutes. It ran roughly eleven thousand six hundred times across a hundred and twenty-one days and reported success every time. It had been writing to the wrong file since April.
Separately, an operation set out to update twenty-four cells. The request was accepted, fourteen were saved, and that was reported as a success too.
Nothing crashed and no alert fired, because from the outside everything looked fine, which is precisely what made it dangerous. The rule the product was rebuilt around came out of that: permission to attempt something is not proof that it happened correctly.
Why it is relevant to client work
When a client asks for AI inside their business, the hard part is not the model. It is what the AI is allowed to touch, who authorised it, and how anyone proves afterwards that the work was actually done.
We had to answer that for ourselves first, on our own operations, after our own failure. That is the same argument as the rest of this portfolio: we do not recommend an approach we have not had to operate.
Where information comes from, and what that is worth
A system that reasons over a business needs to know more than what it was told. It needs to know who told it, whether that source was one the business actually trusts, and whether the thing it is looking at was observed or generated.
Vera accepts information from other systems across an authenticated boundary, and it establishes who sent it independently of anything the message says about itself. A message that announces its own authority does not get it. That sounds like a small distinction and it is the whole difference between a record you can audit and one you can only hope about.
It also keeps the difference between evidence it observed and evidence produced for testing, and it will not promote uncertainty into fact to make an answer tidier. Where something is unknown, it stays unknown, and says so.
And accepting information is not permission to act on it. Admission and authority are separate steps, deliberately, because the moment they collapse into one an AI that can read becomes an AI that can change things.
What is built and what is being built
Vera runs Digital Galactica Labs' own operations - not a pilot and not a demo environment, but the real thing, with real consequences when it is wrong. It is in daily use against real operational workflows, which is why the failure story above is ours rather than a cautionary tale about somebody else.
The commercial platform is still being built, and veracloudai.com lists what is not available yet rather than implying otherwise: multi-company separation, enforced customer sign-in, a broad catalogue of connected systems, and the general boundary through which any AI tool's actions would pass. We would rather say which is which than let a case study blur it.
Capabilities demonstrated
What this project proves we can do
- Declared-in-advance authority: an unrecognised target stops the job rather than defaulting to allowed
- Independent resource identification before a write, by identifier and by name
- Verification that records its own basis, so a self-report is not stored as an independent check
- Idempotency keys and version preconditions, so a retry cannot execute twice
- An append-only record of what was attempted, against what, by which process, and how it was verified
- Authenticated evidence intake, where the sender is established independently of what the message claims about itself
- Provenance carried per fact rather than per document, so part of a record can be established while the rest is not
- Observed evidence kept distinct from evidence generated for testing
- Unknown preserved as an answer, rather than resolved into a confident one
- Admission separated from authority: accepting information is not permission to act on it
- Model-agnostic by design: changing which AI does the thinking does not change the controls or the record
Technology
- Claude
- Model Context Protocol
- Custom MCP servers
- Python
- TypeScript
More work
Other software we have built
Nutrition and Meal Planning Application
easyChef Pro
Read the case study →B2B Nutrition Platform and API
NutriSync
Read the case study →Nutrition Data and Scoring Infrastructure
Digital Nutrition Intelligence
Read the case study →E Commerce Development and Operations
Boho Beach Hut
Read the case study →Tell us what you are trying to build
Tell us about the business, the problem, what you have today, and what you want to accomplish.