diff --git a/satgate-landing/app/components/HomeClient.tsx b/satgate-landing/app/components/HomeClient.tsx index cbc533bd..042f6169 100644 --- a/satgate-landing/app/components/HomeClient.tsx +++ b/satgate-landing/app/components/HomeClient.tsx @@ -361,10 +361,10 @@ const LandingPage = () => { Start here. No workflow changes. Map authority, tools, and spend before enforcing policy.

@@ -396,31 +396,57 @@ const LandingPage = () => {

Their Agents - Prevent Unauthorized Access

-
- {/* Prove - evidence above external rails */} +
+ {/* Admit - external agents above payment rails */}
Protected by default →
-

Prove (evidence above rails)

+

Admit (external agents, above rails)

- verify → authority proof → Evidence Pack + verify → authorize → admit

- Govern external agent access without making payment proof equal authorization proof. + Let approved external agents consume your APIs with scoped access, without making payment proof equal authorization proof.

    -
  • ✓ Let approved agents consume APIs without long-lived shared secrets
  • -
  • ✓ Preserve authority evidence above x402, L402, API-key, or enterprise billing rails
  • +
  • ✓ No long-lived shared secrets for approved external agents
  • +
  • ✓ Authority evidence above x402, L402, API-key, or enterprise billing rails
  • ✓ Per-request pricing and policy at the gateway before forwarding
  • -
  • ✓ Approved agents consume scoped access and leave an Evidence Pack
  • +
  • ✓ Scoped access on your terms
+ {/* Prove - spans both agent lanes */} +
+
+ PROOF SPANS BOTH LANES +
+
+
+ +
+
+

Prove

+

Every governed decision, for your agents and theirs

+
+
+

+ Signed receipts for allowed, denied, paid, delegated, and revoked decisions are reconciled into + Evidence Packs your auditor can verify independently. +

+
+ ✓ Both agent lanes + ✓ Every governed decision + ✓ Signed, tamper-evident receipts + ✓ Independently verifiable Evidence Packs +
+
+ {/* Token Delegation Video */}
@@ -467,7 +493,7 @@ const LandingPage = () => {

Badge in once. Fly through every gate.

- Agents get a credential at startup - like mounting an EZ Pass. Every request after that flows through the gateway: verified, metered, no slowdowns. + Agents get a credential at startup - like mounting an EZ Pass. Every request after that flows through the gateway to be verified and metered under policy.

@@ -502,7 +528,7 @@ const LandingPage = () => {

- No identity lookups on the hot path. No per-request auth round-trips. Just cryptographic verification at wire speed. + Capability verification stays on the request path without per-request identity round-trips.