ActiveGemini
Coordinates the commission through Google ADK and participates as an independent worker.
Rally workspace
Your accountable AI team.
One secure workspace.
Sign in to commission and track work, inspect independent verification receipts, manage the AI workforce, and approve the company systems each teammate may use.
Stored in Google CloudCiphertext only · KMS protected
or use an invited company email
Checking secure sign-in…
Privacy browser or blocked pop-up? Use full-page sign-inWork
Your accountable team at work.
Commission work by email, follow every active job, and inspect the evidence before anything is called complete.
0
active jobs
0
need attention
0
completed
0
certified systems
Your accountable AI teammate
Choose the role. Rally assembles the team.
You define the business outcome. Rally quietly routes the right models, approved systems, recovery, and independent verification underneath.
Policy stays on
1
Choose an assistant
Who should lead?
2
Set expertise & autonomy
How should it work?
Expertise
Autonomy
One bounded recovery handoff is allowed. A different model must still approve the work.
3
Connect approved assets
Give it trusted context.
0certified systemsOptional for the first job. Nothing is implied as connected until discovery and a live read pass.
4
Choose communication
Two doors. One accountable queue.
Accepted into Rally
Job accepted
Queued with Rally policy attached.
Task management
Work queue
Updates pausedLoading your workspace queue…
↗
Select a job
Open a run to inspect its progress, workers, checklist, and independent verification receipts.
Teammates
Create the role people will work with.
A teammate is the durable business identity. Models are workers behind it; email providers are channels beneath it.
Identity before infrastructure
Choosing a provider creates a workspace-owned setup record. Rally marks the address live only after the provider authorization, DNS, or bidirectional verification step genuinely passes.
Your team
Persistent business roles
Loading teammates…
AI workforce
The workers behind every teammate.
These model families perform parts of a job. Your customer-facing teammates remain stable even when Rally routes work to a different provider.
Current pilot boundary
The active fleet is authenticated on Rally’s approved execution host. Business-system OAuth does not authorize a model account, and Rally never copies consumer session tokens into its web control plane.
Active
ActiveAnthropic
Claude
Implements and reviews through an approved, separately authenticated Claude runtime.
ActiveOpenAI
Codex
Implements and verifies through a per-user Codex sign-in isolated from company connectors.
xAI
Grok Build
Headless CLI and device-code/API-key authentication make Grok a strong fourth-family candidate. It remains off until isolation and execution-symmetry tests pass.
Rally’s minimum: at least two distinct model families. A worker may repair another provider’s failure through Second Wind, but it still cannot approve its own work.
Connections
Bring approved company context.
Connections are optional for a first run. When you add one, Rally prefers provider consent, certifies the exact read surface, and keeps every token away from model context.
0
certified connections
9
supported systems
0
keys exposed to models
✓
Google Cloud KMSEnvelope encryption active
Business systems
One approval when the provider allows it.
OAuth is the default experience. A restricted credential appears only where a provider cannot yet complete a Rally-owned consent flow.
Coming soonGoogle Workspace
One approval for a governed bundle of Drive, Docs, Sheets, Slides, Calendar, Gmail, Chat, and contacts.
Coming soonSlack
Search decisions, understand history, and prepare governed team updates.
Ready to connectGitHub
Repositories, issues, and pull requests through a read-only, locked-down MCP path.
Ready to connectCloudflare
Investigate Worker logs and metrics through Cloudflare’s scoped Observability MCP server.
Ready to connectn8n
Only administrator-approved workflows exposed as bounded company tools.
Ready to connectStripe
Inspect account context and Stripe’s API reference without enabling money movement.
Ready to connectAtlassian
Jira, Confluence, and Compass context in one accountable assignment.
Coming soonSalesforce
Customer, pipeline, and service records through a read-first SObject boundary.
Ready to connectHyperAgent
Review agent threads and pending approvals through a verified agent interface.
Certification boundary: “Certified” means Rally completed provider authorization, matched the live MCP tools to a committed safe preset, and passed one fixed read-only canary. An encrypted credential or a successful tool list alone never enables an adapter.
Policy
Accountability outside the prompt.
Models propose work. Rally’s deterministic control plane decides what may run, what needs approval, and when a claim is complete.
No self-approval
An item reaches done only when a different model family verifies the owner’s work.
Least privilege
Every run freezes its allowed systems and tools before a worker receives the job.
Bounded recovery
Second Wind may hand a failure to another family once; it never waives independent review.
Receipts, not confidence
Evidence, verifier identity, policy decisions, and residual risk stay attached to the run.