Skip to content
PRODUCT · WORKSPACE & SURFACES ThunderBlock · beta Prism · live ACORN · live

One managed workspace.
Every action receipted.

A ThunderBlock is the unit you provision and run inside the Thunderline environment. It binds human operators, agent identities, capability tiers, shared memory, and the 17-field receipt chain into one isolated cell.

Get a ThunderBlock Jump to ACORN live surface ↓ Interactive workflow walkthrough →
01 · WORKSPACE UNIT beta

ThunderBlock

What you provision. One ThunderBlock isolates your mission state, Mnesia event bus, policy rules, and agent workers behind explicit capability boundaries (:read, :mutate, :admin, :execute).

Provisioned via Blockstrap · Cloud or dedicated cell

02 · OPERATOR SURFACE live

Prism

Your operator console into a running ThunderBlock. Inspect live agent proposals, approve or deny gated actions, and verify persisted ActionReceipt and LineageEdge chains. Prism is an observation and sign-off surface—never an independent source of authority.

Read-mostly oversight · Zero implicit privilege escalation

03 · REFERENCE APPLICATION live

ACORN

The first live application built on Thunderline. ACORN exercises receipt sealing, authority-decision correlation (verify_persisted_edge/4), and seal classification (AcornReceiptSealClassification.classify/1) on real governed workflows.

Inspect the redacted ACORN wireframe ↓

WHAT YOU BUY & WHO RUNS IT

Scoped authority from first breath.

  • Human operator owns the root grant. Agents cannot self-mint capabilities or widen their own scope.
  • PolicyGate sits in front of all 42 executors. Every tool call or mutation is validated against the caller's capability tier before execution.
  • Receipts seal before completion returns. Each consequential action writes a 17-field ActionReceipt and a cross-checked LineageEdge.
  • Untrusted code stays in K1 WASM cells. Third-party or synthesized skills execute in zero-import wasmtime NIF cells with hard fuel and wall-clock limits.
PRISM OPERATOR VIEW · REDACTED WIREFRAME Prism · live
PRISM // THUNDERBLOCK CELL [REDACTED-ID: tb_01j8...9f] GATE: ENFORCING ACTIVE AGENTS (3) actor: planner_01 tier: :read | :mutate actor: k1_cell_exec tier: :execute (hermetic) REDACTED TENANT SCOPE POLICY GATE · ACTION VALIDATION Thundercrown.PolicyGate.validate_and_execute/2 ALLOW · capability :mutate · executor Crown.Manual.ArtifactWrite DENY · capability :execute · out-of-scope egress blocked SEALED ACTIONRECEIPT · 17 @seal_fields seal_hash: sha256:9f4c2e8a...d41b08c3 lineage_edge: verified (verify_persisted_edge/4 -> :ok) classification: :current_valid [PAYLOAD REDACTED FOR PUBLIC SITE] Loom operator walkthrough video coming soon · Redacted UI wireframe
LIVE APPLICATION PROOF · #ACORN-DEMO ACORN · live

ACORN: proving the receipt spine on real workflows.

ACORN is the first live application running on Thunderline. Where our Observatory walkthrough illustrates a four-stage governed workflow conceptually, ACORN executes those stages against the live 17-field receipt and lineage-correlation spine.

ACORN RECEIPT & LINEAGE CORRELATION SURFACE (REDACTED WIREFRAME) AcornAuthorityDecisionCorrelation.verify_persisted_edge/4
01 · PROPOSE Mission Step step_id: stp_88a1c domain: :acorn_ops MessageReceipt.seal/2 status: :sealed 02 · AUTHORIZE PolicyGate Check tier: :mutate authz_actor: op_REDACTED DECISION: :authorized 42 Crown Executors telemetry != authz_actor 03 · SEAL RECEIPT ActionReceipt (17) action_id: act_410f evidence_refs: [2 refs] seal_version: :v1 sha256: 7c1e...b902 classify/1 -> :current_valid 04 · CROSS-VERIFY LineageEdge Check edge_id: edg_99c2 source -> receipt_hash CORRELATION: :verified Tamper requires dual table hash rewrite
Customer-specific mission payloads are redacted in public views. Full code patterns are published in /docs and /security. Provision a ThunderBlock