4,218,309
actions gated, last 24h
3.2ms
p50 gate latency (
–ᛏ)
–ᛏ)
1,142
actions denied at ᛏ DENIED
99.99%
gate availability, 90 days
realms → orchestration layers
realms → orchestration layersThe trust topology is the mental model
Subdomain = realm: the routing topology and the mental model are the same diagram. Crossing a realm boundary always means transiting a gate — there is no other path.
Asgard
Control plane / governance — policy decided in daily council at the Well
asgard.norngate.com
Midgard
User-facing tier — frontend gateway + session layer. Humans live here
app.norngate.com
Vanaheim
Federated integrations — external APIs, negotiated trust
vanir.norngate.com
Alfheim
Low-latency tier — edge functions, fast-path inference
alfheim.norngate.com
Nidavellir
Build & artifact layer — CI/CD, registry, the tool-forging tier
forge.norngate.com
Jotunheim
Sandboxed untrusted execution — unvetted code, untrusted tool-calls
jotun.norngate.com
Muspelheim
High-heat compute — GPU / training cluster
muspel.norngate.com
Niflheim
Cold storage — primordial ice, archival / glacier tier
nifl.norngate.com
Helheim
Dead-letter queue — jobs that did not die gloriously
hel.norngate.com
Valhalla
Completed-jobs archive — died in battle, successfully
valhalla.norngate.com
ragnarök — the scheduled DR drill: full-system chaos, recovery validation, rebirth
the tree and the gate — core plane
Orchestrator core
codename: yggdrasil
The service mesh connecting all realms. Every inter-realm hop transits it — there is no side channel.
The Gate
api.norngate.com
Single guarded ingress — the guarded bridge between the outside and the mesh. AuthN/Z enforced here, by Heimdall.
Event bus
codename: ratatosk
Pub/sub broker between realms — the messenger that runs the tree, ferrying events up and down.
why gates
Autonomy you can put in front of an auditor
fail: closed
Fail-closed by default
A gate that cannot evaluate denies. Outages degrade to inaction, never to unreviewed side effects.
policy-as-code
Deterministic, not vibes
Policy is declarative and versioned in git. The same intent gets the same verdict, every time — no LLM judging LLMs.
ed25519
Signed audit substrate
Every transit — admitted or denied — is hash-chained and signed. Reconstruct any decision months later.
any framework
Fleet-agnostic
LangGraph, OpenAI Agents, custom loops — heterogeneous fleets share one gate topology via a thin SDK or sidecar.
zero standing creds
Credentials per action
Agents hold no secrets. Scoped credentials are minted at the gate and expire with the action.
skuld
See denials before they spike
Skuld forecasts approval backlogs and rate-limit pressure, so you tune policy before the fleet stalls.
the fleet
A named agent for every job
Sixteen roles ship with the runtime, named for the job they do in the myth.
Odinplanner
Meta-reasoning for high-stakes decisions. Costly deliberation buys better verdicts.
Thorexecutor
Heavy, idempotent, retryable ops. Always returns to the hand.
Lokired team
Chaos and fault injection. Breaks things so the system hardens.
Heimdall
AuthN/Z and observability at The Gate. Alerts ride the Gjallarhorn channel.
Tyrᛏ
Policy enforcement that accepts cost to contain a known threat.
Bragigeneration
Long-form content generation.
Forsetiᛞ
Arbitration when agents disagree. Multi-agent consensus.
Idunnlifecycle
Model refresh, fine-tune scheduling, version rotation.
Hermoddlq
Rides into hel. to retrieve and retry failed jobs.
Huginnretrieval
Reasoning-driven search. Flies out daily, reports back.
Muninnmemory
Vector recall over fleet memory.
Mimirknowledge
Persistent, queryable knowledge base the whole fleet consults.
The Nornstelemetry
Urd, Verdandi, Skuld — logs, live monitoring, forecasting. The namesake →
Valkyriesdispatch
Worker pool and queue consumers. The choosers of tasks — which jobs go to Valhalla.
Ratatoskbroker
Pub/sub messenger, ferrying events up and down the tree.
Ragnarökdr drill
Full-system chaos exercise with recovery validation. Ends in rebirth, not just destruction.
the namesake
Three Norns watch every transit
NornGate is named for the Norns — past, present, and what-shall-be. They are the observability spine: every gate verdict lands in all three.
past
urd.norngate.com
Urd
Log aggregation and audit history. The signed, hash-chained record of everything the fleet has done.
present
verdandi.norngate.com
Verdandi
Real-time metrics and live monitoring. The pulse of the fleet, gate by gate, as it happens.
future
skuld.norngate.com
Skuld
Forecasting, capacity planning, anomaly prediction. Denial spikes and approval backlogs, seen before they land.
the pipeline
Five gates between intent and side effect
An agent never touches the world directly. Its intent is serialized, transits the pipeline, and only a fully-admitted action executes. Any gate can deny; denial is terminal and logged.
Ingress — The Gate: authN/Z, rate limits, schema validation
p50 0.4ms
ᛏ
Policy — deterministic, fail-closed checks; no model in the loop
p50 1.1ms
ᛗ
Approval — human sign-off: scoped, expiring, attributable
human-paced
ᚦ
Sandbox — origin-isolated, zero standing credentials, off-domain
isolated
ᛞ
Arbitration — cross-agent conflict resolution; writes never race
fleet-wide
any gate can deny — denial is terminal, logged, and lands in hel.
policy-as-code
One file gates the write path
Reviewed in a PR like any other change. If the rule can’t be evaluated, the action is denied.