Cut token spend, and sign the number you cut
Surfil trims the context agents never needed, measures the cache premium you are paying, and names the writes that are never read back - then signs the measured saving.
surfil verify on any receipt - the signature is the proof.The chain that removes it
Agents re-send the same context, re-read files they have already seen, and the bill creeps up with nobody able to point to exactly why.
Core consolidates
Scattered MCP servers collapse into one endpoint, so less repeated context ships on every operation.
Cap trims and routes
Redundant context is pruned before it is sent and heavy tasks route to the cheapest capable model.
Bench proves it
The measured before/after saving is signed into a receipt you can verify offline, with no account.
How the number stays honest
Measured, never invented
We publish no savings percentage. Cost is always measured on your own traffic and reported in tokens.
Byte-exact underneath
Cache tuning preserves the provider prefix hash exactly, so the savings never cost you your prefix cache.
Unmetered execution
The Core consolidation and the Cap ledger run on every plan; the signed savings receipt is the metered output.
More in this view
Same spine, a neighbouring starting point.
Block risky calls
Guard evaluates every tool call on-device before execution - catching secrets and prompt injection pre-flight, and failing closed whenever a call is ambiguous.
See this path →Portable memory
Mind gives your agents local, encrypted memory with provenance on every fact - and it follows you across agents instead of living inside one tool's silo.
See this path →Prove compliance
Surfil turns agent activity into offline-verifiable evidence: signed attestations, control-mapped bundles, and a tamper-evident trail your auditors check themselves.
See this path →Turn on the first stage today
The install is reversible byte-for-byte, and the first signed receipt arrives after one normal week of traffic.