Pricing · what you actually pay for
Committed consumption for verified execution.
The open layer is free and Apache 2.0. The platform is metered by verified decisions — you pay for the outcome you trusted, not the inference behind it. Enterprise is contracted, single-tenant, with signed SLAs. One pricing model, scaled to where you are.
01 · Tiers
Four tiers. One runtime underneath.
$0 — Apache 2.0
The Open Intent taxonomy, the OpenClaw openshell-adapter, the @intended-inc/sdk, and the operator CLI. Self-host, fork, contribute. Verify a sealed token offline. No account required, no usage cap.
Metered — by verified decision
The hosted authority runtime: LIM-backed interpretation, Ed25519 token minting, the hash-linked audit chain, and every managed connector. Billed per decision that produced a verifiable outcome. Denied and escalated decisions cost nothing.
Contracted — single-tenant
Isolated control plane, your own signing keys, SOC 2 audit prep, signed SLAs, a named technical contact, and change-window-aware deployments. On-prem and private-cloud options. Committed annual volume.
On request
Air-gapped deployment with a local-model LIM backend is in design with enterprise partners; no action data would leave your boundary. For customers with regulated-material or data-residency needs (sovereign options on request).
02 · The metering model
The billable unit is a verified decision.
A verified decision is one authority verdict that resulted in an Authority Token being minted and redeemed at a connector — a real action you let through and can prove. That is the unit you pay for. It is not per-token, not per-inference, and not per-seat, because none of those map to value: a thousand denied attempts are a thousand things that didn’t happen, and you shouldn’t be billed for safety.
03 · Always included
The guarantees don’t move with the price.
Fail-closed enforcement, Ed25519-signed consent, and an immutable audit chain are not premium add-ons. They are the product. Every paid tier ships with them; the tiers differ in isolation, deployment, and support — never in whether the safety property holds.
Fail-closed, every tier
No token, no action — verified in the target system, not by us. The invariant is identical from the free SDK to a dedicated single-tenant deployment.
Portable audit chain
Hash-linked, WORM, cryptographically signed and replayable. Per-tenant public-key (JWKS) verification is live. Export it and hand it to an auditor at any tier.
Open layer underneath
The taxonomy and clients are Apache 2.0. You can rebuild enforcement against the open standard if you ever leave.
04 · What you do not pay for
Denied decisions are free.
If verification fails, no token is issued and nothing executes — and you are not billed. You do not pay per classification, per policy evaluation, or per seat. The thing you bought is the verified outcome, not the inference. That alignment is deliberate: it means we only make money when we let through an action you were right to trust.
05 · Next
Pick the tier that fits where you are.
Start free on the open layer, move to the metered platform when you need hosted authority, and contract for enterprise or sovereign when isolation and SLAs matter. We will help you size committed volume off your real decision traffic.