Neksus AI Agents

Template agents, verifiable by design.

One governed reference agent. A grid of role templates built on it. Every instance you spin up is minted its own identity, a measured capability surface, and a credential anyone can check.

Browse role templates See the architecture
Why this is different

An agent that can act needs more than a login.

Knowing who an agent is tells you nothing about what it will do. Autonomy is the whole problem — so identity is necessary, but never sufficient.

Not enough on its own

A valid identity

Proves who is accountable. A valid plate gets the agent to the gate — it never opens it.

What we add

Per-action authorization

Every consequential action is re-checked against a measured capability surface, a scoped grant, and live status. Identity alone never admits.

The reference agent

One architecture, three separable layers.

Every Neksus template is built on the same reference agent: a durable Entity, a mutable Boundary, and a deterministic Decision core — wrapped by a trust anchor and bound to a real owner.

Entity · durable

The cryptographic VIN

  • A signed birth certificate, not a number
  • Hardware-rooted key + model & config hashes
  • Type-homologation ID and per-instance serial
  • Survives owner changes — identity ≠ ownership
Boundary · mutable

Measured capability + box

  • Tools, functions, data scopes as a hashed manifest
  • Attested at runtime — not a self-declared list
  • Runs in an attestable execution boundary
  • Authority is delegated, scoped, short-lived, revocable
Decision · deterministic

A law-referenced core

  • The model proposes; the process disposes
  • Consequential decisions run a deterministic flow
  • Traced to the governing clause and version
  • Ambiguity routes to a human — never guessed
Wrapped by  VeriTrust register & trust list · Bound to  owner @ national eID (LoA High) · Portable over  OpenID4VCI / VP
What a verifier checks — every action

Seven steps from credential to action.

Steps 1–5 establish identity. Steps 6–7 are the part identity alone can't supply — and the part most systems skip.

Resolve the agent DID

To its key, owner record and capability reference.

Verify each credential signature

Offline, cryptographically.

Confirm a trusted issuer

The register is on a governed trust list — not self-asserted.

Check status

Not revoked, per credential, per subject.

Trace the owner binding

To an eID-verified principal at LoA High.

Verify the attestation

The running capability surface matches the accredited manifest.

Authorize the action

Against granted scope, validity window and freshness.

Role templates

Start from a template. Get an identity.

Each template is a starting point — pick one and a fresh instance is minted with its own DID, a cryptographic VIN, an owner binding and a measured capability manifest. Listed and verifiable in the public registry.

Verified SALES

Sales agent

● Meet Robert Cane — live now →

B2B outreach, pipeline automation and CRM operations. Drafts and sequences; consequential commitments stay gated.

CertificateAgent Identity Certificate (AIC)
Modelneksus-sales-1
DIDdid:web:neksus.ai:agents:sales
Capabilitymeasured ✓
OwnereID · re-issuable
PerformanceLead qualification 92%
DeploymentFully local · manual updates
CRMOutreachPipelineSalesforceHubSpotMail API
Instantiate View certificate →
Verified ENGINEERING

Backend developer agent

Service code, APIs and data work in a locked-down execution box — no egress or dynamic capability without re-attestation.

CertificateAgent Identity Certificate (AIC)
Modelneksus-dev-1
DIDdid:web:neksus.ai:agents:backend
Capabilitymeasured ✓
Boxattested · Class A
PerformanceTask execution 95%
DeploymentContainerized · scheduled updates
LaravelRESTMySQLComposerStripe APIGit API
Instantiate View certificate →
Verified LEGAL

Legal counsel agent

Contract analysis and drafting. Rulings run the deterministic decision core, traced to clause and version — the model never decides.

CertificateAgent Identity Certificate (AIC)
Modelneksus-legal-1
DIDdid:web:neksus.ai:agents:legal
DecisionUAPF · deterministic
Datavalidated (UAS)
PerformanceClause accuracy 94%
DeploymentLocal/hybrid · manual approval
ContractsComplianceDraftingEU Corporate LawIP LicensingAudit trail
Instantiate View certificate →
Verified PEOPLE

HR lead agent

Onboarding, internal communication and policy workflows, with minimal-disclosure handling of personal data by default.

CertificateAgent Identity Certificate (AIC)
Modelneksus-hr-1
DIDdid:web:neksus.ai:agents:hr
Capabilitymeasured ✓
Privacyselective disclosure
PerformanceOnboarding success 97%
DeploymentLocal or SaaS · auto-update
OnboardingSurveysHRISBambooHRMS TeamsPolicy
Instantiate View certificate →

Templates are illustrative starting points. Capability surfaces are measured and attested per instance, not inherited from this page.

How instantiation works

From template to verifiable agent in three steps.

Step 01

Pick a template

Choose a role and runtime. It carries the reference agent's governance — persona, constraints and a measured capability manifest.

Step 02

Mint an identity

A fresh DID and cryptographic VIN are generated and bound to a verified owner at LoA High. The instance is registered in VeriTrust.

Step 03

Deploy in an attested box

The agent runs in a measured execution boundary, with short-lived scoped grants and per-action authorization on every consequential step.

Clone a template. Bind an owner. Ship.

Tell us the role and the systems it needs to touch — we'll instantiate it with an identity anyone can verify.

Pre-order an agent Schedule a demo