SETTINGS
Configure your control plane.
How the control plane is configured for Acme Financial Group. Every change is attributed and written to the evidence ledger.
Identity Providers
Human and machine identity for the control plane. Agents inherit scoped identities from the same directory.
Microsoft Entra ID
SAML 2.0 · 4,182 users · SCIM provisioning
Okta Workforce
OIDC · Contractors and partners
SPIFFE Workload Identity
Agent runtime attestation
LLM Providers
Only models registered here may serve production workloads. Governance applies uniformly across every provider.
OpenAI
GPT-5 · 118 agents · EU data boundary
Anthropic
Claude Opus 4.1 · 64 agents
Gemini 2.5 Pro · 31 agents
Azure OpenAI
Private endpoint · ap-southeast-2
MCP Servers
Tool servers agents may reach. Each server is scoped, versioned and subject to runtime policy.
salesforce-mcp
v2.4 · read, quote · 41 agents
m365-graph-mcp
v3.1 · mail, calendar, files
sap-finance-mcp
v1.8 · read-only positions
docusign-mcp
v1.2 · execution disabled by policy
Secrets & Credentials
Agents never hold long-lived credentials. Tokens are minted per action and expire on completion.
Credential broker
HashiCorp Vault · ap-southeast-2
Token lifetime
Ephemeral · 15 minutes maximum
Rotation
Automatic · every 24 hours
Standing credentials
0 agents hold static keys
Policy Packs
Curated regulatory packs maintained by Herding Cats and mapped to your internal standard.
EU AI Act — High Risk
42 policies · updated 2 Aug 2026
APRA CPS 234
18 policies · financial services
ISO/IEC 42001
31 policies · 4 in remediation
NIST AI RMF
27 policies
Notifications
Who is told, how quickly, when governance conditions are met.
High-risk policy violation
CISO, AI Governance Lead
Approval SLA breach
Approver and delegate
New agent discovered
Platform Engineering
Weekly governance summary
Executive Committee
Approval Routing
Which human authority receives which decision, with delegation and escalation paths.
Discount > 15%
Sales Director → VP Sales
Contract > $100,000
Legal Counsel → Deputy GC
Restricted data access
Data Protection Officer
Out-of-hours actions
On-call duty approver
Enterprise Branding
How the control plane appears to your people, approvers and external auditors.
Organisation name
Acme Financial Group
Approval emails
governance@acmefg.com
Evidence pack cover
Acme letterhead applied
Custom domain
control.acmefg.com
Users & Roles
Separation of duties between those who build agents and those who govern them.
AI Governance Lead
3 members · full policy authority
Approver
87 members · decision rights only
Agent Owner
212 members · own their agents
Auditor
9 members · read-only evidence
API Keys
Programmatic access to the control plane for CI pipelines and internal platforms.
platform-ci
hc_live_••••4f21 · registry write
grc-reporting
hc_live_••••9ab7 · evidence read
legacy-inventory
hc_live_••••01c8 · expires in 6 days
Audit Retention
How long evidence is held, where it lives, and who may reach it.
Evidence retention
7 years · regulatory minimum 5
Storage
Write-once object store · ap-southeast-2
Legal hold
2 matters · 1,204 records
External auditor access
Scoped, time-boxed, logged
Security
Controls protecting the control plane itself. Governance is only as strong as its own perimeter.
Multi-factor authentication
Phishing-resistant · required
Privileged session recording
Policy changes and role grants
Network
Private link · IP allow-list
Penetration test
Last completed 12 Jun 2026
Every AI agent earns autonomy through identity, policy and accountability.
Configuration changes take effect at the next runtime evaluation and are recorded permanently.