Permissions & Deployment
Single-tenant controls for sensitive process IP
Zero data egress
LOCKED
No outbound calls. Air-gapped or DMZ-terminating options.
Encryption at rest
AES-256
Per-site keys
Model training
No customer data, ever
Customer IP remains isolated
Retention
7 years
Automatically archived
Autonomy ladder
v1 propose-only → v2 propose+stage → v3 gated auto-act
Every widening is approved
Writes to equipment
NEVER
No process-tool write access
Audit trail
| At | Actor | Permission | Principal | Before / after | IP |
|---|---|---|---|---|---|
| 2026-09-18 09:10 | Kiran · agent | read:evidence | kiran.agent | Compliance proposal STAGED | 10.18.4.22 |
| 2026-09-18 08:11 | R. Mehta | approve:proposal | quality.head | Evidence edge read | 10.18.4.22 |
| 2026-09-18 07:12 | Kiran · agent | read:evidence | kiran.agent | Evidence edge read | 10.18.4.22 |
| 2026-09-18 06:13 | R. Mehta | approve:proposal | quality.head | Evidence edge read | 10.18.4.22 |
| 2026-09-18 05:14 | Kiran · agent | read:evidence | kiran.agent | Evidence edge read | 10.18.4.22 |
| 2026-09-18 04:15 | R. Mehta | approve:proposal | quality.head | Evidence edge read | 10.18.4.22 |
| 2026-09-18 03:16 | Kiran · agent | read:evidence | kiran.agent | Evidence edge read | 10.18.4.22 |
| 2026-09-18 02:17 | R. Mehta | approve:proposal | quality.head | Evidence edge read | 10.18.4.22 |
| 2026-09-18 01:18 | Kiran · agent | read:evidence | kiran.agent | Evidence edge read | 10.18.4.22 |
| 2026-09-18 00:19 | R. Mehta | approve:proposal | quality.head | Evidence edge read | 10.18.4.22 |
Agent authority matrix
| Agent | Read | Propose | Stage | Write tool |
|---|---|---|---|---|
| Tool-Availability | Approval | NEVER | ||
| Drift | Approval | NEVER | ||
| Gap | Approval | NEVER | ||
| Traceability | Approval | NEVER | ||
| Yield-Attribution | Approval | NEVER | ||
| Compliance | Approval | NEVER |
Deployment topology
Edge gateway
OT / IT VLAN
On-prem app
Optional DMZ portal