Shadow Sweep
Every material action is a plan first: metadata, hashes and provider revision markers, never a mutation. Validate → price → authorize → commit → verify → receipt.
The digital-state engine, programmable.
Connect a user's storage through Sweep Connect, discover what is consuming space and money, preflight every action as a Shadow Sweep, commit only what is authorized, and get a signed receipt. Same engine as the consumer product. No second business logic.
planpriceauthorizecommitverifyreceipt
133REST operations, OpenAPI 3.1
Ed25519signed receipts, verifiable offline
0permanent deletions in the engine
EN · ES · HIproduct locales, English API
One engine
Section titled “One engine”Vault verified first
Source removal is impossible before Vault verification. Trash is always reversible. Permanent deletion does not exist in the engine.
Governed delegation
Applications and agents act only inside versioned delegation grants. Revocation is immediate. Every decision is auditable.
Signed receipts
Executions produce Ed25519-signed receipts bound to the plan hash. Verify them offline with the published JWKS.
Pick a surface
Section titled “Pick a surface”REST API133 operations. OpenAPI 3.1, JSON Schema, RFC 9457 errors, cursor pagination, idempotency keys, CloudEvents webhooks.
TypeScript SDKZero dependencies. Node, browsers, Workers. Typed from the spec and checked against every operation.
Python SDKSync and async clients on httpx. Typed models generated from the JSON Schemas.
sweep CLIplan create, price, authorize, commit --wait, restore, migrate, usage.
Sweep ConnectHosted end-user provider connection and consent. You get a connection id, never a provider token.
Connector SDKBuild a bidirectional Provider Adapter for a new provider and certify it with the harness.
MCP serverCapability-scoped tools with honest annotations, OAuth 2.1, and step-up approval for destructive actions.
A2A agentAgent Card, skills, and a task lifecycle for agent-to-agent orchestration.