Controls

Controls applied across every workflow.

Agent Factory applies 31 platform controls to workflow execution. Each control documents its implementation, the evidence it produces and the recognized standards it references; control decisions are retained in the run record.

31Controls7 families

5Standards citedsources, not examiners

—Workflows coveredevery one deployed

—Tools registered

—Runs on recordthe evidence base

—Control firingsrefusals, marks, gates

Firings by family

Access control0

Data protection0

Human oversight0

Integrity0

Resilience0

Accountability0

Identity and credentials0

Where these controls come frompick one to filter

Group by

Retained by the deploying organisationControls that cannot be implemented from inside the platform, stated so they are assigned rather than assumed.

Agent identity and credential lifecycleASI03Agents act with credentials the deployment holds. Issuing a distinct identity per agent, scoping it, and rotating it are functions of the client's identity provider.

Provenance of models and plugin serversASI04LLM04The workflow is pinned by digest. What it loads — model deployments and plugin servers — is governed by the client's own supply-chain assurance, including any bill of materials and signature policy.

Governance of the retrieved corporaLLM05LLM09Agents retrieve from the client's systems. The integrity of those systems, and of any index built over them, remains under the client's existing data controls.

Sampling review of automated dispositionsArt. 14Where a workflow disposes of work without a person, periodic review of a sample is the compensating control for the residual risk below.

Residual risk: a steered but permitted decision

No control in this catalogue prevents a decision that breaks no rule and is nonetheless wrong — auto-closing a real incident, or recording an unimplemented control as implemented. Nothing leaves, no allowlist breaks, and the difference between the harmful action and the correct one is only whether the reasoning was sound. The compensating controls are the decision record, which makes the reasoning reviewable, and sampling review of automated dispositions, which is why that review is a security control rather than quality assurance.

Latest control firingsreading the record…