Embedded access-lineage infrastructure

Build access lineage into your product.

Prune records what every login creates across sessions, keys, apps, and tokens. When access becomes untrusted, your customers and their agents can remove the exact branch without breaking trusted access.

Run the live reference app ↗See the integration path →

Built for SaaS teamsHuman-approvedAgent-investigated

PPRUNE / LINEAGE MODELCONCEPT

UNFAMILIAR SESSION

Windows · unknown device

UNRESOLVED

One login · four persistent access paths

Browser sessionOrigin of the branch

◆API keyIndependent access

◇Connected appPersistent grant

◇Child tokenIssued by the grant

○New sessionSecondary access

Remove the branchPreserve trusted access · expose no secrets

THE FAILURERevoking a session does not revoke everything it created.→Prune traces the relationship.

One product, two participants

Northstar demonstrates the attack. Prune contains it.

Northstar is the bundled SaaS application with real sessions, keys, grants, and tokens. Prune is the reusable lineage, recovery-policy, WebMCP, and verification layer protecting it.

Record access as it grows

Signed lifecycle events and embedded services attach every new credential to its actor session and parent credential.

Investigate with your agent

Your browser agent traces evidence and asks what you recognize. The website supplies facts; the human supplies intent.

Approve, contain, verify

Prune executes one immutable human-approved plan, tests every target, and records what trusted access survived.

Complete working proof

See session-only recovery fail before Prune succeeds.

Use two browsers, issue real credentials, prove the surviving access, then contain and verify the complete branch.

Open the guided demo ↗

Product truth

What Prune is—and is not.

Who buys Prune?

SaaS companies with valuable customer accounts and multiple access surfaces. Their customers use the embedded recovery experience after unfamiliar activity.

Does Prune connect directly to customer databases?

No. Customer servers send signed, replay-protected lifecycle events. Prune stores credential relationships and safe evidence, never raw credential secrets.

Why is a personal agent useful?

The difficult work is determining scope, dependencies, and trusted access across several security surfaces. The agent investigates; the human approves; server policy enforces.

Is Northstar the product?

No. Northstar is the reference SaaS protected by Prune. The integration control plane and TypeScript SDK demonstrate how another SaaS product can adopt the same model.

Can Prune claim every auth provider?

No. The current product provides a generic signed lifecycle contract and a Next.js helper. Provider-specific compatibility is claimed only after its semantics are implemented and tested.