Proof across four platforms
Terraform
Stipul authorized a plan-only run and denied auto-approve execution and workspace deletion. The denied requests were not forwarded to HCP Terraform.
Stripe
A $150 credit note passed through Writ. A $900 credit note was denied before Stripe was contacted.
GitHub
Stipul allowed branch creation, a README update, and pull-request creation. A write to the protected GitHub Actions workflow was denied before reaching GitHub.
Microsoft Graph
Six tool calls were evaluated during a live Microsoft Entra offboarding workflow. Four were allowed, session revocation required approval, and permanent account deletion was denied.
