Govern agents
For: tenant admins and governance reviewers.
Set rules for agent work, review changes and keep the evidence needed to explain decisions.
Set and assess rules
Configure tool policy and command rules. Use governance replay to assess a change against recorded work, and reviewed changes to approve changes to controls.
Control data access
Set taint and label policies, configure AI labels, and review works-council mode before exposing figures about people.
Handle personal data
Find, export, restrict or erase personal data. Review retention and backup behaviour before relying on an erasure.
Stop and investigate work
Use kill switches to stop work and incidents to record the response, deadlines and evidence.
Review accountability
Maintain the inventory, then read or export the audit trail and verify its records.
Evidence for agents
Let an agent read another plugin's job outcomes and install details under a grant, with the granting person's permissions checked at every read.
Tool policy
Decide what each call of a tenant's tools may do, Allow, Ask or Refuse, by what each function says it does: Read, Write, Sends out, Destructive or Unknown.