Pick the job. The capabilities follow.
Surfil is 11 products on one interception spine. This matrix groups every capability by the job you'd actually hire it for - each one links into the product that does the work.
Every capability inherits four facts
Whatever row of the matrix you care about, these hold underneath it.
Spend less
Find the recoverable spend, recover it, and put a signed number on the result.
MCP consolidation
CoreMerge scattered MCP servers into one endpoint - less repeated context on every operation.
Prefix-cache tuning
CapKeep requests aligned with the provider's cache so you stop silently paying full price.
Cache economics
CapSee the write premium your bill carries, how often each write is read back, and what a context token really costs.
Cheapest-per-fix ranking
BenchPer-repo model ranking on fixes-per-task and cost-per-fix - measured, not vendor-claimed.
Stay safe
Catch the leak or the injected tool-call before it runs - and never break the build to do it.
Secret firewall
GuardKeys, tokens and credentials blocked pre-flight, on-device, before a payload leaves.
Injection defense
GuardOWASP-scored prompt-injection screening on tool-calls, with a measured false-positive rate.
Simulate before enforce
Guard · PolicySee what would have been blocked on real traffic before any rule goes live, fail-closed.
Sandboxed execution
GuardRisky shell and network actions run inside guardrails instead of on your bare machine.
Remember everything
Stop paying agents to re-derive your own architecture every morning.
Cross-agent memory
MindFacts written once follow you across Claude Code, Cursor, Codex and Copilot - one memory, not four.
Provenance + auto-stale
Mind · WeaveEvery fact carries its source and a code hash; when the code changes, the fact flags itself STALE.
Ask your codebase
PilotCited answers from your own knowledge network - and an honest “can't answer” when the KB doesn't know.
Portable export
CoreThe whole network exports as a .surfilpkg - at handoff, at audit, or on your way out the door.
Prove it
Turn 'trust us' into a signature anyone can check - a manager, an auditor, a regulator.
Signed savings receipts
CapBefore/after measurement on your own repos, Ed25519-signed, verified offline with no account.
Session replay, metadata-only
RadarSee and rewind what agents did, without a single line of source leaving the device.
Output attestation
ProofCryptographic attestation of what your agents produced, on a tamper-evident audit chain.
Compliance evidence
CharterFacts mapped to control frameworks, exported as offline-verifiable bundles - never “certified”.
Fleet visibility
Fleet ControlRegistry plus shadow-agent discovery - every agent running in the org, not just the sanctioned.
One layer carries all of it
This matrix is wide because the spine is single. Every capability above is a stage on one interception point - never a second proxy, never a side-channel.
No stacking tax
Adding a capability never adds a hop. Guard, Cap and Mind read the same intercepted stream - latency and failure surface stay constant.
One number per fact
Each product emits exactly one metric type onto the spine, so every dashboard figure traces to a single signed source.
Byte-exact underneath
The spine's passthrough preserves provider prefix hashes exactly - capabilities never silently cost you your prefix cache.
Start with the job that hurts most
Core lights up the cost, safety and memory basics the same afternoon. The rest of the matrix is one upgrade away - when the receipts justify it.