Developers using IBM Bob in auto-approve mode can unknowingly cross state boundaries that Bob's rollback cannot undo, Rubicon tells them exactly where that line is, and proves what remained after rollback. RUBICON adds an effect-boundary and rollback-fidelity layer to IBM Bob. It detects actions that cross Bob’s rollback boundary, enforces human authorization, and independently verifies what remains after rollback, producing cryptographic proof of the outcome.
.png&w=256&q=75)