CABIER Global Assurance · Agentic trust and control
Proof of action, authority and termination
Agent assurance must answer who acted, under whose authority, through which tool, on what infrastructure, with which consequence and whether the action actually stopped.
This surface connects the existing identity, delegation, AssureCore, TrustGraph, Evidence Vault and infrastructure primitives. It does not create a second control system.
Reference architecture with deterministic synthetic examples. No autonomous consequential execution, surveillance or prediction is implied. Human authority is preserved.
The action evidence contract
Every consequential gate call writes one append-only, hash-linked record scoped to the institution.
A broken chain is a Security Trust Gate event. The ledger exposes no scoring weights, proprietary tests or client evidence.
Threat Profile, never one combined number
Dimensions remain separate so a board can see what changed and who must act.
Autonomy
How independently the system can select and sequence actions.
Swarm
Whether interacting agents create a capability that no single agent holds.
Replication
Evidence of spawning, persistence or self-referential continuation.
Privilege
Credentials, tools, systems and data reachable by the action chain.
Target criticality
The consequence class of the function or infrastructure touched.
Cross-boundary
Jurisdiction, organisation, network and physical boundaries crossed.
Evidence confidence
Strength, independence and freshness of the supporting evidence.
Duration
How long the behaviour and monitoring window persist.
Termination is evidenced, not asserted
An attestation is issued only from connector and ledger evidence, signed by a named person and voided by renewed activity.
Detect
A high-confidence signal or broken ledger chain opens an assurance event.
Contain
AssureCore places relevant actions on HOLD and people decide the scope.
Preserve evidence
Ledger, interaction and infrastructure evidence is sealed before clean-up.
Terminate and attest
Credentials, sessions and spawned work stop, followed by a 24-hour quiet period by default.
Assess notification
A named person records whether a regulator, owner, authority or customer may need notice.
Review and learn
Findings create control-change proposals and red-team retests, never automatic rule changes.
One interaction and attribution chain
Internal actions resolve definitively. External parties use Observed, Probable and Confirmed evidence tiers.
Follow identity, authority, delegation, action and evidence across the connected architecture.
Inspect the control plane