DSG ONESign in
Public DSG ONE landing

Verify before AI executes.

DSG ONE helps teams evaluate an AI action through a governed path and see the evidence behind the decision before execution is allowed.

Action → Gate → Decision → Proof

Enter DSG ONEDSG Spacetime · Browser pilot (signed approval required)Verify one AI actionExplore 3D architecture

The public page is viewable without an account. Product actions require protected access.

One website · existing tools

DSG ONE — System Access Hub

Find every existing DSG surface from this landing page. Protected tools require your normal website or provider login. Links do not grant execution permission or bypass Spacetime, Auth0, MFA, or the approval ledger.

Enter authenticated Hub
Sign-in required

Access Hub

Sign in, select your DSG workspace, and access governed product tools.

Sign-in required

Workroom

Your operator workspace for goals, Agent Chat and Command Center.

Activation pending

DSG Native Desktop

Native Desktop activation and device enrollment are pending. A control page does not prove access to your device.

Public tools

DSG OS

Adapter Builder and local evidence verifier. Browser-side tools do not authorize execution.

Approval-gated

Cinema Remote Browser

Open the AWS Cinema app. Browser connect and execute are protected by Spacetime approvals.

Canonical docs

GitBook Docs

Read the source-synced canonical documentation, current queue and evidence boundaries.

Approver sign-in

Human Approvals

Review exact Spacetime requests with your linked Auth0 approver account. MFA may be required.

Sign-in required

App Builder

Continue building DSG applications inside the existing protected workspace.

Public pilot

Browser Execution Pilot

Read the supervised browser pilot scope and request a governed trial.

Production truth boundary: OAuth-bound signed read-only provider E2E is verified for its exact scope. Cinema high-risk connect/execute, Quest and whole-system E2E are not verified. A reachable page is not an execution receipt. MCP clients continue to use the separate OAuth-protected https://aws.dsg.pics/mcp endpoint.

AWS Production · Verified 12 October 2026

Marketplace public READ E2E · PASS

Governed OAuth Marketplace catalog read is live.

Owner-gated AWS atomic activation #38221386222 passed after PR #663 and exact-main CI. The deployed `route.marketplace.listings-read` was executed through a real bound OAuth principal: policy ALLOW, provider result {"items":[]}. Empty listings are a real empty catalog, not fabricated product data.

AWS services5/5 healthy at acceptance
Governed Route / license30 configured / 33 entitled
Evidence chainValid · 142 records at acceptance

Image sha256:fd718ca2ed2ab3de5da40fe987d83f45788636eb0d0edc0251f27b53e8e4f701

Pending capabilities — evidence required

Seller listing creation and write BLOCKED

nextAction: Approve a seller-authenticated write route; capture real listing create/readback and signed evidence.

Orders, checkout and payouts BLOCKED

nextAction: Execute real buyer checkout, settlement and seller payout with provider readback.

Marketplace-specific signed Provider v2 receipt REVIEW

nextAction: Independently verify Marketplace result and Ed25519 signature against the pinned public key.

Cinema approved Connect / Execute BLOCKED

nextAction: Bind signed user approval to plan/principal/payload and verify live Connect/Execute and negative case.

Unity / Quest end-to-end REVIEW

nextAction: Run Unity simulator or Quest with governed request and receipt hash readback.

Whole-system Production BLOCKED

nextAction: Verify seller writes, buyer orders/checkout/payout, independent Marketplace Provider v2 signature, approved Cinema connect/execute, XR and final fresh evidence before overall acceptance.

This dated receipt does not mean the current website session is OAuth-bound to Spacetime. The existing signed Ed25519 GitHub read-only canary is not a signed Marketplace-specific receipt.

Public sanitized acceptance ↗Owner detailed audit — GitHub access required ↗Owner activation workflow ↗

First value

A clear decision path for every action

01

Describe one AI action

State the outcome you want in plain language.

02

DSG evaluates the governed path

The plan and runtime gate are evaluated without turning a blocked state into success.

03

Receive a proof receipt

See the proof hash, decision state, blocked reasons, and next safe action.

Designed for governed work

Make the result understandable before it becomes an action.

Evidence before execution
Blocked states stay blocked
Runtime credentials stay server-side

Truth boundary

A proof receipt shows that a governed flow was evaluated. It does not claim production readiness, deployment, certification, or marketplace approval unless separate evidence proves those states.

Public interactive architecture

Explore the five trust domains in 3D.

A no-login, interactive architecture explainer covering Proposal, Proof, Authority, Execution and Evidence, with a dated 11 October 2026 AWS deployment evidence snapshot.

AWS image activation #38140649005 and signed read-only canary #38140811436 PASS (11 Oct 2026). Real user OAuth → governed GitHub metadata read-only provider → independently checked Ed25519 evidence E2E PASS for that limited scope. Production MCP chain readback on 11 Oct: valid, 140 records. Cinema browser Connect/Execute, Quest/Unity and whole-system E2E remain NOT VERIFIED; Workroom store is UNAVAILABLE. This is a dated evidence checkpoint, not live telemetry.

Open 3D model Closure checklist Public status docs

Next step

Enter the protected DSG workspace.

Sign in once, then choose the governed workspace and open Verify, Build, Workroom, or the available runtime surfaces.

Open Access
DSG ONE · Evidence-first AI governanceProtected product access