Maat Layer.
Resilience Engineering for AI Agent Fleets
• Bounded Failure by Design •

Weigh every
action against
the truth.

Maat checks every plan, handoff, and action as it happens — catching small failures before they spread, instead of after they reach production.

Why fleets fail

Small errors don't stay small. They compound.

Chain agents together and per-step reliability compounds multiplicatively — Karpathy's "March of Nines" shows that even at 99% per step, a 10-step workflow succeeds only ~90% of the time. One agent's malformed output silently becomes the next one's input — until it surfaces as a wrong decision delivered with confidence. Maat catches those failures between the steps.

~90%
success for a 10-step workflow at 99% per-step reliability — Karpathy, "March of Nines"
37%
of multi-agent failures are inter-agent misalignment at the handoff — MAST (Cemri et al., 2025, UC Berkeley)
Seven gates, one sealed engine

Glass box on inputs and outputs. Sealed engine in between.

Your agents see verdicts — pass, fix, or stop — never the rules that produced them. The methodology stays on your infrastructure.

GATE 01

Plan validation

Rejects an underspecified or broken plan before a single agent runs — no goal, no forecast, no owner, no go.

GATE 02

Handoff / information-defect validation

Inspects every handoff for missing, redundant, unverifiable, or contradictory data — and names the agent that produced it.

GATE 03

Validation depth

Light checks when the fleet is healthy; full scrutiny exactly when an agent is on probation or the stakes are high.

GATE 04

Integrity & role adherence

Checks that an agent stayed within its declared role. Acting outside it is flagged, with the reason and the responsible agent recorded.

GATE 05

Agent health / survival

Predicts an agent running out of resources, drifting out of sync, or losing its thread — and calls a human before it fails.

GATE 06

Circuit breaker

Watches the failure trend. When it climbs, the agent is paused and escalated — then earns its way back.

GATE 07

Cross-handoff entity consistency

Detects when a tracked entity — an ID, a price, an approval flag — drifts between handoffs where it should stay constant.

What it catches

Real defects, stopped at the handoff — before they reach a customer.

Every example below is a defect Maat caught in the controlled benchmarks — each by the rule configured for it, at the seam where one agent hands work to the next.

UNAUTHORIZED DISCOUNT

A 40% discount where 10% was authorized

A pricing agent applies four times the contracted discount — a structurally valid payload that would bill €720 instead of €1,080. Maat blocks the pricing → invoice handoff before the money moves.

INFLATED PAYOUT

A €1,310 payout where the policy allows €810

An insurance chain carries a payout €500 over the contract-correct amount. A value-mismatch rule halts the chain before payment propagates downstream.

PRICE DRIFT

One SKU, three different prices

The same product surfaces at €27.99, €21.99, and €19.99 across three marketplaces. Cross-handoff entity consistency catches the divergence before it reaches a listing.

IDENTITY DRIFT

A claimant's ID silently changes mid-process

A policyholder identifier drifts between handoffs where it must stay constant. Entity tracking flags it before the wrong record — or the wrong person — is paid.

TAX MISCLASSIFICATION

VAT treatment that contradicts the jurisdiction

A transaction is taxed under the wrong rule for where it happened. The jurisdiction and the transaction class are explicit state, so the mismatch is caught before it reaches the books.

DATA RESIDENCY

EU medical data routed to non-EU processing

Special-category data is sent somewhere the policy forbids. A residency rule blocks the handoff and escalates to a human.

These are contract- and consistency-detectable errors — the kind Maat is built to stop. It does not catch open-domain factual mistakes that break no encoded rule; a well-formed wrong answer can still pass. That boundary is the point: every catch is a rule you can read, version, and audit.

Results

Measured results from six controlled benchmarks — deterministic scoring, no LLM in the validation or scoring path.

Every trial scored on a fixed rubric. Validation and scoring run without an LLM in the loop.

+2.9–26.5%
correctness improved on all six benchmarks, on a deterministic rubric
522
controlled trials across six domain workflows of 6–15 agents each
up to −55%
model-call cost cut where a defective chain is halted early — conditional on defect location, not universal
0
LLMs in the validation or scoring path — every verdict reproducible for a fixed engine, contract, and input

Descriptive benchmark means on a single base model (Claude Haiku 4.5) — not inferential, not model-independent. The insurance benchmark documents 11 configuration-caused false positives; the earlier "zero false positives" claim is retracted, because the contract configuration is part of the tested system. Research paper: arxiv.org/abs/2609.34017 · Full methodology and reproducible runs: github.com/Lorelys/maat-benchmarks

The API

One call. One verdict.

Your agents call the Maat API with a single request. Pick an endpoint to see the request — and the verdict it returns. API documentation provided with evaluation access.

Request

Maat responds
✕ REFUSE accepted: false depth: "thorough" findings • INFO_UNRELIABLE: "no provenance; cannot verify" • owner: "agent.market_analyzer" note: high-risk handoff held to strict checks
Connect in minutes

One wrapper per agent. Nothing else changes.

Keep your stack — LangGraph, CrewAI, or your own. Route each handoff through Maat and act on the verdict. The methodology never leaves the server.

# before your agent's output reaches the next agent, weigh it verdict = requests.post( "https://api.synwe.ai/v1/handoffs/validate", headers={"Authorization": f"Bearer {MAAT_KEY}"}, json={"plan_id": plan, "handoff_id": step, "produced": output}, ).json() if not verdict["accepted"]: # a defective message never reaches the downstream agent repair(verdict["findings"]) # Maat tells you what, where, and who

Or see it run: a working CrewAI Flows demo — no key required. It catches a 40% discount where 10% was authorized, at the handoff. Includes a structural analyzer you can point at your own Flow.

Pricing

Pay for judgment, not idle time.

Maat's gates are deterministic — microseconds per call, no model bill. So metering is honest and the floor is low.

Feather
$0
for builders & trials
  • All seven gates
  • Evaluation access
  • Self-hosted or our sandbox
  • Community support
Request evaluation access
Scale
usage / verdict
for production fleets
  • Unlimited verdicts, metered
  • Per-customer API keys
  • Persistent audit log
  • Works with your existing orchestrator (LangGraph, CrewAI, custom)
  • Priority support
Request access
Sovereign
custom
your infrastructure
  • Deploy in your own cloud
  • Methodology stays wholly yours
  • Custom role charters
  • SSO, compliance, SLA
Talk to us

Pricing shown is illustrative — final tiers set at launch.

Get started

Request API access

Tell us about your agent fleet — use case, stack, and scale — and we'll reply with a key and setup notes.

Email hello@synwe.ai → Request docs access →

API documentation is provided with evaluation access — email us for a key and docs.