TaskHawk Systems builds formally verified runtime security infrastructure for autonomous AI and operational automation. Kevros enforces permission-before-power: proposed actions are checked before execution, issued signed Allow, Constrain, or Deny release tokens, and recorded in hash-chained evidence for independent review. Available on AWS Marketplace for Amazon Bedrock AgentCore Runtime, ECS, EKS, and Lambda. Verification artifacts include 1.94 billion TLA+ states, 71 proofs across six layers, 20 Lean theorems, zero reported property violations, and post-quantum evidence signing.