HOW IT WORKS

From sign-in to signed report.

Every step below says what you do, what the engine verifies, and what the browser cannot do. Approvals, payment, signing, starting and stopping always need a person.

Who acts

  • Human required

    Only you can do this. No tool or assistant can do it for you, and the engine accepts it only from you.

  • Engine

    The Cybersive engine verifies it and records a receipt. Only its receipts count.

  • Watch only

    Your tools or assistant may watch: read status, progress and readiness. Watching never approves, pays, signs, starts or stops anything.

THE FLOW

Ten steps, in order.

Each step waits for the engine's receipt from the one before. A click in the browser never advances a step.

Note. Today the engine answers only its health and catalogue routes. The routes a tool would read to watch status, progress, report readiness or tokens are not available yet, so there is nothing to watch until the engine provides them.

  1. Step 0

    Sign in by email code

    You doHuman required
    Enter your work email, then the code sent to that address.
    The engine verifiesEngine
    Checks the code against its own sign-in request and sets an HttpOnly session cookie that the site never reads.
    The browser cannot
    Create a session. Only the engine's answer to your code does.

  2. Step 1

    Create an engagement

    You doHuman required
    Choose the package and set the scope: primary domain, ports, target and origin countries, and the time window.
    The engine verifiesEngine
    Records the scope as a new engagement owned by your account. Only an account owner can create one.
    The browser cannot
    Accept a scope. It checks the form's format only; whether the scope stands is the engine's answer.

  3. Step 2

    Identity

    You doHuman required
    Read the consent, accept it explicitly, and verify your identity with Didit.
    The engine verifiesEngine
    Approves only on the provider's signed decision and a checked email, seals the evidence into Cybersive-controlled storage, and waits for the provider's deletion confirmation.
    The browser cannot
    Mark identity as verified. Returning from Didit identity verification records nothing.

  4. Step 3

    Payment

    You doHuman required
    Pay for the engagement through Airwallex checkout.
    The engine verifiesEngine
    Records payment only when the signed Airwallex webhook confirms a cleared settlement.
    The browser cannot
    Mark payment as done. Returning from checkout never marks payment as done.

  5. Step 4

    Ownership

    You doHuman required
    Publish the exact DNS TXT record the engine gives you for your domain.
    The engine verifiesEngine
    Records ownership only when two independent resolvers return the matching TXT value.
    The browser cannot
    Confirm ownership. Pressing verify only asks the engine to look.

  6. Step 5

    Letter of authorization

    You doHuman required
    Open the letter, check that it matches your scope, and sign it with the e-signature service.
    The engine verifiesEngine
    Records the authorization only from the signed callback, with a signed receipt. The signed letter matches the immutable scope.
    The browser cannot
    Mark the letter as signed. Checking the signature only asks the engine for its receipt.

  7. Step 6

    Start

    You doHuman required
    Decide to start, and press start yourself.
    The engine verifiesEngine
    Revalidates scope, receipts and the time window before issuing a worker-only run grant.
    Your tools may watchWatch only
    Read whether the engine has scheduled the run. Not available yet: the engine does not answer these routes today.
    The browser cannot
    Start a run. The press is a request; only the engine schedules the run.

  8. Step 7

    Run and kill switch

    You doHuman required
    Decide whether to stop. Stopping needs your own acknowledgement that the remaining scan is lost and payment is not refunded, and a reason.
    The engine verifiesEngine
    Runs only inside the approved window and scope. The kill switch stops remaining work at once and records an audit entry.
    Your tools may watchWatch only
    Watch the run's stage and progress. A tool may tell you something looks wrong; only you decide to stop. Not available yet: the engine does not answer these routes today.
    The browser cannot
    Stop a run by itself. The stop counts only when the engine records it.

  9. Step 8

    Report

    You doHuman required
    Download the encrypted archive and reveal its password in the dashboard, or request an emailed code to open the plaintext report.
    The engine verifiesEngine
    Delivers only an integrity-checked, signed report, to the account owner.
    Your tools may watchWatch only
    Check whether the signed report is ready. Not available yet: the engine does not answer these routes today.
    The browser cannot
    Keep the password. It is held on screen only while the panel is open and stored nowhere.

  10. Step 9

    Developer tokens and webhooks

    You doHuman required
    As the account owner, issue a scoped token after the four gates, copy its secret when it appears, and revoke it when you are done.
    The engine verifiesEngine
    Issues tokens only after identity, settled payment, DNS proof and signed authorization, and checks role and receipts on every call.
    Your tools may watchWatch only
    List tokens and read engagement status with a developer token. Not available yet: the engine does not answer these routes today.
    The browser cannot
    Store the secret. It is shown once and never kept. Customer webhooks are not live.

WHERE STATE LIVES

Only the engine's receipts count.

  • Each gate is a receipt the engine recorded from proof: a signed provider decision, a signed webhook, matching resolver answers, a signed callback.
  • The workspace shows what the engine has recorded, or says plainly that it has not been recorded.
  • A click, a return from a provider page, an email or an assistant's summary never moves a gate.

ASSISTANTS

Using an assistant with Cybersive

To give your assistant the text you can see, use the Copy for LLMs button at the bottom of every page, or this site's plain-text summary: /llms.txt

  • Ask it to answer only from that text. If the text does not say, the honest answer is that it does not say.
  • Copies never carry token secrets or report passwords, and your assistant never needs them.
  • An assistant may read and explain. It cannot approve, pay, sign, start or stop for you; stopping needs your own acknowledgement.

SUMMARY

Who acts at each step

Every step needs a person and an engine receipt. Watching becomes possible only once a developer token exists, after the four gates.

Steps by actor
StepHuman requiredEngineWatch only
0 · Sign in by email codeYesYesNo
1 · Create an engagementYesYesNo
2 · IdentityYesYesNo
3 · PaymentYesYesNo
4 · OwnershipYesYesNo
5 · Letter of authorizationYesYesNo
6 · StartYesYesYes
7 · Run and kill switchYesYesYes
8 · ReportYesYesYes
9 · Developer tokens and webhooksYesYesYes
Open workspace ↗Developer routes →

Asking an assistant about Cybersive? Give it the text of this page.

Copy this page for your assistant

Takes only the text you can see on this page, adds instructions for the assistant, and copies it or saves it as a file. Nothing is sent anywhere. One-time secrets, passwords and anything typed into a form are left out.

Format