One decision record

AI work should hold up to scrutiny

Tempera turns a declared workflow into an analyst-readable record: an evidence boundary, bounded proposal, configured authority signal, and typed result. This public projection foregrounds what should be inspected before a private run.

Built for analysts, with regulators in mind. Illustrative only: no workspace, provider, credential, or run data is present.

Decision record

Illustrative contract · not live data

Definition, not a run

Workflow definition03 / Authority

Tempera WorkflowsRead-only definitionInspect · pan · zoom

React Flow

Capability: Declared outside the sensitive edge
Authority: One configured signal gate
Outcome: Typed before it leaves the workflow

Capture intenttrigger.manual

The requested job is visible before a private workspace considers it.

Declare capabilityconnector.request

A declared capability is visible; connection details and credentials stay private.

Normalize deterministicallytransform.map

A deterministic transform keeps the planned shape explicit.

Bound model proposalllm.generate

The model can propose. The declared workflow keeps the limits and next step explicit.

Await authority signalcontrol.awaitSignal

One exact configured authority signal resumes the private workflow.

Return typed resultoutput.structured

The result leaves the workflow through a declared structured boundary.

Governed connection

A workflow should see the capability, not the sensitive edge

The same declaration can travel through a private connector, curated MCP surface, or typed application integration.

Declared operationWhat the workflow is allowed to ask for
Private connectionTransport and credentials remain outside the workflow
Governed effectPolicy keeps the next consequential step explicit
Typed boundaryThe workflow receives only the declared result shape

Workflow sees: Declared capability
Connector keeps: Connection, transport, credentials
If an API changes: Classify first; propose a reviewable repair