Recently Updated Pages
Using it in an audit
Some practical notes from what auditors actually ask. Generate it at the time, not afterwards Ret...
SIEM: pull with the OCSF API
The pull option: your SIEM asks Sentilai for events on its own schedule. The endpoint GET /api/si...
What the evidence pack contains
Compliance produces a point-in-time record for a date range you choose, as a printable report and...
What you are billed for
A common and reasonable question: does routing through Sentilai make AI usage cost more? Sentilai...
Seats and plan
Billing & Plan shows your plan, your seat limit, and how many seats are in use. A seat is a perso...
The SSO enrollment wizard
Connecting your identity provider is eight steps, and the wizard will not let you activate someth...
What alerts are for
The delivery guarantee Alerts are fire-and-forget. Delivery is attempted alongside the request, n...
Running in the background
The app is designed to be invisible once set up. The system tray Closing the window hides the app...
The Tools tab
Everything about which AI tools on this machine are governed. Tool cards One card per supported t...
Gemini CLI and Codex CLI
Both are handled by the standard adapter path: detected automatically, connected by Govern all de...
Govern all detected tools
The fastest way to put a machine under governance: one button, every tool it can find. Doing it O...
Install the Endpoint Suite
The Endpoint Suite is the desktop app that puts a developer's machine under governance. It signs ...
Authenticating to the API
Sentilai's API uses OAuth 2.0 client credentials. You create a credential in the console, exchang...
The other columns
When Request time. The feed is newest-first. Developer Who sent it, and which tool. A dash with a...
Invite a developer
Developers are the people whose AI tools you're governing. A developer invite grants no console a...
When someone cannot sign in
The common cases, in the order they actually occur. "This account can't open the admin console" T...
Passkeys explained
Sentilai has no passwords. Not "passwords plus MFA" — no password field exists anywhere. This sur...
Provisioning and approval
Step 6 of the wizard, and the decision that determines who can walk in. Default role for new sign...
Configure your identity provider
What step 3 of the wizard needs, by provider. Google Workspace Client ID and client secret from a...
Resend a passkey link
Use this when someone can't sign in because their passkey is gone — a lost or wiped laptop, a rep...