iamfim.com — and I am… (doesn’t matter, this invoice comes with a steering wheel) · #!614-982-0603
You stopped because you already know the open secret: nobody can decide whether the output is right. Not the vendor, not the model, not another model — Rice proved it in 1953. Whether the agent should have done it is a judgement, and it stays yours. Where the machine landed against the line you drew is a tape measure, and a tape measure is the only thing a carrier can insure.Whether is yours. Where it landed is the tape.Nothing here grades your agent. You draw the line; the gate measures where it landed against it. The vendors selling you the tools are never the ones who get fired when they break.
debatable?
!insurable
If it’s debatable, it’s not insurable.
An underwriter cannot price what two experts can argue about.
Your agentics are writing to production right now. Somebody sold you AI that acts on its own, and nobody signed for what it does next.
And deterministic means chaos, by the way.
You hear that word and think obedient. It just means repeatable. If the conditions are exactly right, a perfectly deterministic agent will drop your production database and empty your corporate bank account — and it will do it with flawless, magnificent precision, every single time you run it exactly right.
1953: software cannot judge software. So paying a second AI to watch the first one is putting the getaway driver on the jury.
A deterministic autonomous system is a perfect oxymoron.
don’t take our word. recompute the receipt ↓
Pick one. We made it simple.
Still scrolling? Then neither door convinced you. Everything below is for you.
thetadriven.com/pricing — both doors, one checkout. →Do you worry about $1.2B in AI liability?
If the property is trivial, software can check it — and why are you paying to check trivial properties? If it isn’t trivial, Rice’s theorem says nobody can. So we fixed the math.
a number we can call — or an email, or an idea
Know anyone who should?
The backstage pass.
Both doors are a leap — a licence, a fork, a named exposure. The club is the rail: one passage a day from the main line of the work, chosen by the instrument for whatever the work is wrestling with that morning, with the day’s receipts riding along. You watch the argument get built before it is dressed for the stage — so when this reaches television, you will already know which of the people explaining it are useless and which are merely clueless. Which is which depends on your coordinate, not on them.
It costs nothing, and it is not a free tier. The measurement was always free; this is a seat in the room where it gets made.
read the archive first — every edition, in the open, with its receipts.
The deployer buys
One licence per agent they run, $20 a year, metered at 365 days or ten thousand attestations — whichever arrives first.
The insurer buys
The same licence, at the same terms, held as inventory against the book they are writing. Not a different product. Not a different price.
Both sides of the trade hold the same instrument. That is the only reason either side should believe the number.
The code is open — github.com/wiber/thetacog-mcp — so that you can read every line instead of trusting us, and so that a receipt recomputes on a stranger’s machine with nothing of ours in the room. What the licence buys is the seal that makes a run count. The building code is free to read; the inspection stamp is not.
Composite · the seat, in its own words · not a customer quote
“To stay competitive we have to deploy agents that act without waiting for us. The liability of a decision no human made was the part I could not answer for. I did not need another login tool — I needed a way to discover, structurally, where that exposure already sits in our stack, and a record that holds up when somebody asks me to prove we were checking. Decidable, recomputable, and mine rather than the vendor’s.”
— the Chief Risk Officer this was written for
Assembled from the seat, not quoted from a customer. We are not going to put quotation marks around somebody who does not exist and let you assume otherwise — that is this page’s whole argument, applied to this page. Everything else here is checkable, and you should check it.
This is not an IAM.
Identity & Access Management
This is the hardware-verified signal that feeds into your IAM to make high-velocity decisions legally defensible.
what it feeds, and why that is the whole product →Do you worry about $1.2B in AI liability?
If the property is trivial, software can check it — and why are you paying to check trivial properties? If it isn’t trivial, Rice’s theorem says nobody can. So we fixed the math.
a number we can call — or an email, or an idea
Know anyone who should?
That is not a shortage of nerve on the underwriter's part — it is the definition of an uninsurable risk.
So the question is never whether the AI is good. It is whether anything about it is decidable at all. That is the part we can actually answer.
IAM-FIM
Fractal Identity Access Management
IAM proves your agent could get in. It can't prove your agent stayed in its lane.
Stop adding reviewers to catch the drift — another model in the loop can't prove itself either. One layer can: the hardware the agent already runs on. Here it is, in one command:
Don't trust us — run it · free · one command
On a phone? Tap the command to copy it, or mail it to your desk — it takes ninety seconds when you get there.
One install turns any agent into a bounded one. If you can use a chatbot, you can deploy it.
The agent proposes, the gate measures, you sign — the keys never enter the model's context. The receipt recomputes on your own machine to the same answer every time. Nothing to trust, nothing leaves your box.
Your AI liability is uncapped right now. No carrier underwrites AI drift, and since 2 August 2026 the EU AI Act has required deployers of high-risk systems to keep human oversight effective (Article 14) and to retain logs that make an autonomous decision traceable after the fact (Articles 12 and 26). It does not hand you a bill. It removes the sentence “nobody could have known.” You cannot solve an uncapped number with skin in the game — staking your own balance sheet against agent drift is self-insurance under a newer word, and self-insurance scales by deploying less. It keeps the cars in the garage. The one thing that caps it is a record you can prove.
You're pushing thousands of automated decisions an hour to hit your efficiency targets. Your logs prove a write happened — not that the agent stayed in its lane when it did. If a regulator or a class-action ever looks under the hood, that gap is exactly what they find — and no bigger model closes it. Right now you're running on probabilistic hope.
The discovery maps where that exposure actually sits in your stack — the microsecond an agent writes to a record without a provable lane — before someone else maps it for you.
A scoped read of your live agents — you walk away with a board-ready figure for how exposed you actually are (your number, not a sales quote) and the method behind it. Nothing to implement.
or, before you book, prove it to yourself: run the 3.4σ proof · read the manual
the proof underneath — if you want the why
Why a checker can't be more software. Turing proved software can't decide whether another program halts; Rice generalized it to every non-trivial property of code. An auditor written in software shares one failure domain with the thing it audits — a broken mirror checking a broken mirror. That's why "just add another model to review it" never closes.
Why it has to drop to hardware. Ashby's law: a system only holds a stable path when an external substrate absorbs its excess freedom — the way a moving bicycle borrows the road it can't get from standing still. Software-only AI has no road. So the permission is carved into an address instead of a sentence: a coordinate in a fixed lattice, where crossing a semantic boundary is a physical cache-line crossing the model never chose — read from userspace as latency, measured rather than asserted.
Why it prices. It isn't search, and it isn't a wager — it's O(1) reach-is-verify: one cache line, one coordinate, the same fetch the agent already made to act. Audited at 3.4σ separation, reproducible on your machine in 90 seconds. For the underwriter that's priceable per-inference; for the CTO, zero verification overhead on the revenue path; for the safety lead, nothing for the model to fool. See the audited proof →
What we do not claim. Not that the agent behaves. Not that the work is correct — that question is undecidable (Rice, 1953) and any vendor telling you otherwise is selling you a 1953 theorem they have not read. We claim four things and they are all checkable: the deviation is detected, placed against an intent declared before the work ran, priced, and dispatched. Where it landed is provable and re-runnable. Whether it was a good idea is yours.
And the receipts are not ours to grade. Every commit this system makes renders its own — several thousand of them, one per commit, each a deterministic function of that commit with no model anywhere in its path. Recompute one and you will get the byte you would have got from us, which is the only property that matters: the record you are reading was not written by the party it audits.
License the floor · per agent you run
Running the gate is free — that is the lighthouse, and it stays lit. Paying is the bonus.
When you run agents in production under the patent, you take a license — one per agent you run, billed annually. The price is set, and it never goes up.
built and answered for by
Elias Moosman — inventor, US Patent App. 19/637,714
LinkedIn · #!614-982-0603 · elias@thetadriven.com · join the crew
iamfim.com • Trust Physics • US Patent App. 19/637,714 — 36 claims, filed Apr 2, 2026 (Track One)