Scoped access
Tenant and workspace boundaries keep resources tied to governed contexts.
Security and Governance
Control what agents can touch, and keep evidence of what they did.
SOIT centers permission, secret, network, audit, and replay controls around agent execution.
01
Policy gates
Access, egress, and tool usage can be checked before the next runtime step.
02
Credential discipline
Secret references reduce the chance of raw credentials appearing in prompts or logs.
03
Review evidence
Audit and replay records keep security review tied to actual agent behavior.
Security and Governance
Control what agents can touch, and keep evidence of what they did.
SOIT centers permission, secret, network, audit, and replay controls around agent execution.
01 Scoped access
02 Secret references
03 Egress control
Secret references
Agents use references instead of raw secrets, with stronger policies in Enterprise paths.
Egress control
External calls pass through explicit policy gateways rather than hidden side effects.
Audit and replay
Execution evidence supports review, release gates, and regression workflows.
Security and Governance
Govern agents before they touch real systems.
Use the security model to discuss Enterprise controls and operating needs.
Before run
Resolve user, workspace, and policy context.
During run
Apply tool, network, and secret controls at execution time.
After run
Retain evidence for audit, regression, and compliance workflows.