Nobody would sign for it
A fluent answer is not a correct one. When an assistant cannot show its sources, its assumptions and what it does not know, the board keeps it away from anything that matters. So it stays a toy.
From the RJ·AJ lab in Riyadh
Built for companies that want automation without giving up authority. Anything consequential waits for a named person to sign.
Pick a request. The gate decides what runs alone and what waits for a name.
A fluent answer is not a correct one. When an assistant cannot show its sources, its assumptions and what it does not know, the board keeps it away from anything that matters. So it stays a toy.
Capability is easy to add. Restraint has to be designed. Most projects start with what the system can do and discover, too late, what it must never do.
Employee records, deal flow and customer files get pasted into someone else's cloud. The most secure record is the one that was never made, and the second best is the one that never left.
We sit with the person who will sign and decide what the system may never do. That refusal becomes a separate mechanism the rest of the system cannot reach or switch off.
Independent checks between the model and the world: sources verified, evidence attached, risk tiered, every step recorded. The model argues the case. It cannot act.
The system runs in your company, on your data, against real work, without touching anything real. Its record is inspected by your people, not ours, until it earns the next tier.
Reversible chores run alone. Consequential steps wait for a named signature. A kill switch outside the agents stops everything. In both languages, plainly.
Watches your approved sources, reduces them to the few signals that deserve attention, and prepares options before the meeting rather than after it. Six auditable checks on every answer.
An HR, operations or support specialist that answers in Saudi Arabic and formal English, drafts documents, tracks deadlines against the Kingdom's rules, and escalates the sensitive categories to a named approver.
A rule engine, evidence ledger and human sign-off layer wrapped around the assistants and agents your teams have already adopted. Risk tiers decide what runs alone and what waits for a name.
Veto is the service form of what the RJ·AJ lab already runs with its own money, staff and name. Only ATLAS acts alone, and only inside limits a person wrote first.
One workflow, one named approver, one paper phase. A written limit set before a line of code. A price agreed before the work starts.
We take a small number of companies per quarter because the two of us do the work. One finds the reaction. The other contains it.
Your data, your machines, your rules, your ledger. If we part ways, the system keeps running and the record stays readable.
No. A chatbot answers. Veto prepares a decision, attaches the evidence, and waits for a person. The model can argue; it cannot act.
Nowhere, by default. We run models on your machines wherever we can and collect nothing we do not need. Where a cloud model is unavoidable, that is a written, signed exception with a limit on what may pass through it.
Saudi Arabic and formal English, in the product and in the paperwork. If a system cannot explain itself to the person using it, in their language, it is not finished.
Usually a quarter. Limits in the first two weeks, gates by week six, then a paper phase against real work. Authority is handed over tier by tier, never all at once.
RJ and AJ, a two-person lab in Riyadh. AJ finds the opening. RJ turns it into a system that can be trusted. The five systems on the lab site are our track record.
Join the waitlist and we will write to you when your cohort opens.
Join the waitlist