Prove who is answerable for every agent, and what it did.
Auditors, regulators and your board ask four things about every agent: who is answerable, what it could do, what it did, what it was refused. One tamper-evident record answers all four.
- m.smith6 agentsgroup support-l2Active
- r.okafor4 agentsSCIM offboardOffboarded
- 02.1
Accountable to one named person
No agent runs without a named person answerable for it. Anchored to them in your own identity provider, not a second directory.
- 02.2
Bounded, and stoppable at the next call
A slice of one person's entitlements, never wider. Ten-minute tokens, re-checked at every call, so offboarding lands at the next one.
- 02.3
Proof, not reconstruction
One export, not a reconstruction. Every credential, refusal and revocation on one tamper-evident record.
The evidence an auditor will accept
Every row carries the chain from person to agent to action. Export it and hand it over.
- 14:22:06Verified
Credential minted
- Agent
- support-agent-v2
- Operator
- m.smith
- Source
- group support-l2
- 14:24:51Verified
Refused, out of delegated scope
- Agent
- support-agent-v2
- Operator
- m.smith
- Source
- org policy v3
- 14:31:02Verified
Operator deactivated, 4 agents suspended
- Agent
- 4 agents
- Operator
- r.okafor
- Source
- SCIM offboard
| Time | Event | Agent | Operator | Source | Chain |
|---|---|---|---|---|---|
| 14:22:06 | Credential minted | support-agent-v2 | m.smith | group support-l2 | Verified |
| 14:24:51 | Refused, out of delegated scope | support-agent-v2 | m.smith | org policy v3 | Verified |
| 14:31:02 | Operator deactivated, 4 agents suspended | 4 agents | r.okafor | SCIM offboard | Verified |
Find out how many agents you already have running.
The free assessment counts them. No identity provider required.