causaly
◈Atrium · The thesis

Something broke. Something cost you $50,000. Something got breached.

Ask any tool why - and it shows you what moved.

The Engine Room · The permanent collection

Not modules. The machinery every wing runs on.

I

The Causal Oracle

discovery

“It learns cause from your telemetry, then answers what if?”

Structure discovery (CUTS+ / NOTEARS), do-calculus, counterfactual simulation, a digital twin of your infrastructure.

II

The Symbolic Guardian

safety

“Every action is proven safe before it runs, and signed.”

Cryptographically attested, fail-closed safety gating on every intervention the system proposes.

III

The Active Inference Agent

decision

“It chooses the move that resolves the most uncertainty, safely.”

Expected Free Energy decisions that balance acting on the graph against learning about it.

Show the engine once - every wing inherits its credibility.

The Eight Wings · One causal question per room

Eight rooms hang off the one graph.

A curator never gives every work the same wall. One room is installed and live. Seven are commissioned studies. The ambition is the full platform; the depth is earned where it can be proven.

ICausalOps · ReliabilityCommissioned · 2026

Will it break before users notice?

On the spine - Sheaf early-warning - drift reads as a rising edge on the graph

drift detected→sheaf alert→page before SLO burn
Staged as a study - a model for a work in progressWant this wing first? Tell us →
IICausalCost · FinOps - the masterpieceIn Residence

Why did the bill spike - in dollars?

Performance - the reveal

deploy checkout-v2.3

one commit · merged 14:02

memory leak

+0.4 GB/hr

OOM kills

first casualties

pod thrash

47 restarts

EBS churn

+$1,140/day

$0

traced through the chain

87%

of the spike · one cause

1 commit

checkout-v2.3

Instrument - operate it yourself

30 days of telemetry · 5 signalscpu · r=0.81p99 · r=0.77errors · r=0.74deploys · r=0.79cost · r=1.00deployOOM cascadedo(deploy = ∅) - the counterfactual

Every line correlates with cost. None of them explains it.

shipped itwhat if we hadn't shipped this?never shipped

$26,310

of $43,850 avoided
counterfactual on the shared graph

We start most partners on Cost - it pays for itself in the first spike. The rest of the graph comes with it. See the offer →

IIICausalDev · DeploymentCommissioned · 2026

Will this deploy break prod?

On the spine - Counterfactual - simulate the ship before you ship it

diff parsed→counterfactual sim→ship / hold gate
Staged as a study - a model for a work in progressWant this wing first? Tell us →
IVCausalGuard · SecurityCommissioned · 2026

How did the breach actually happen?

On the spine - Attack chain reconstructed via the Inflation Technique

phish→lateral move→exfil - the chain, evidenced
Staged as a study - a model for a work in progressWant this wing first? Tell us →
VCausalRemedy · AutonomyCommissioned · 2026

Can it fix itself - provably safely?

On the spine - Guardian-gated action loop

detect→Guardian gate→signed action→verify
Staged as a study - a model for a work in progressWant this wing first? Tell us →
VICausalCompliance · AuditCommissioned · 2026

Prove why this was allowed.

On the spine - Causal provenance plus a signed attestation

action taken→causal provenance→attestation signed→audit passes
Staged as a study - a model for a work in progressWant this wing first? Tell us →
VIICausalTest · ChaosCommissioned · 2026

What one experiment teaches us most?

On the spine - Expected Free Energy picks the highest-information failure to inject

hypotheses→EFE ranks→one experiment→graph learns
Staged as a study - a model for a work in progressWant this wing first? Tell us →
VIIICausalInsight · ExecutiveCommissioned · 2026

What should we do next - across all of it?

On the spine - The whole graph, zoomed out to risk and portfolio

every wing→risk portfolio→the one next move
Staged as a study - a model for a work in progressWant this wing first? Tell us →

sig 9f2c…a41e · fail-closed · attested

The Guardian · A recurring motif

Autonomy you can't trust is a demo. Autonomy that's provably safe is a product.

  • Fail-closedif safety can't be proven, nothing runs
  • Cryptographically attestedevery gate leaves a signed receipt
  • Proven before it runsthe proof precedes the action, always

You met the Guardian in the Engine Room. You will meet it again in every room that acts - deployment gates, remediation, compliance. It is the museum's structural steel: autonomy you can sell is autonomy you can prove.