Emilia Protocol

EMILIA is authorization infrastructure for AI agents that move money or change records. Its commercial product, EMILIA Gate, sits between an agent and the system that executes an action, and checks that exact action against rules the customer owns. The agent never holds the credentials: it asks, and the gate verifies the amount and the destination account against the company's own records rather than against the agent's claim. A request outside the rules stops with a reason, and a larger payment can wait for a person to approve that one payment. The first profile covers finance operations, specifically vendor bank detail changes and payment release, the path exploited by business email compromise. Four other parts surround the gate. Authority Brain maps declared action surfaces so an owner can choose what needs authority. EMILIA Approver collects a fresh human decision on the exact change. EMILIA Protocol preserves refusals and later approvals as separate checkable facts. An Assurance Plane lets an audit lead re perform a population of payee changes and see which records passed, refused or diverged. Every allowed payment produces a signed receipt an accountant can verify offline without asking the vendor, and verification packages ship for TypeScript, Python and Go alongside MCP and SDK integrations. Pricing is published in four tiers. The open protocol is $0 under Apache 2.0 and self operated. One public pilot is offered at $25K for a fixed scope of 90 days and one protected workflow. Gate Implementation runs $150K to $250K for a single consequence boundary. Operated Gate runs $250K to $500K per year, quoted per deployment and scoped only after implementation acceptance. The workforce workspace that organizes agent jobs around the gate is described as a private local alpha, not a hosted service, and the company states it is seeking one finance team to evaluate a refunds workflow.