CABIER Global Assurance · Agentic trust and control

    Proof of action, authority and termination

    Agent assurance must answer who acted, under whose authority, through which tool, on what infrastructure, with which consequence and whether the action actually stopped.

    This surface connects the existing identity, delegation, AssureCore, TrustGraph, Evidence Vault and infrastructure primitives. It does not create a second control system.

    Reference architecture with deterministic synthetic examples. No autonomous consequential execution, surveillance or prediction is implied. Human authority is preserved.

    The action evidence contract

    Every consequential gate call writes one append-only, hash-linked record scoped to the institution.

    Agent and principalIntent and authorityAction, tool and targetData class and resultFive-state dispositionTime and correlationPrevious hash and record hashWorkload and compute cluster

    A broken chain is a Security Trust Gate event. The ledger exposes no scoring weights, proprietary tests or client evidence.

    Threat Profile, never one combined number

    Dimensions remain separate so a board can see what changed and who must act.

    Autonomy

    How independently the system can select and sequence actions.

    Swarm

    Whether interacting agents create a capability that no single agent holds.

    Replication

    Evidence of spawning, persistence or self-referential continuation.

    Privilege

    Credentials, tools, systems and data reachable by the action chain.

    Target criticality

    The consequence class of the function or infrastructure touched.

    Cross-boundary

    Jurisdiction, organisation, network and physical boundaries crossed.

    Evidence confidence

    Strength, independence and freshness of the supporting evidence.

    Duration

    How long the behaviour and monitoring window persist.

    Termination is evidenced, not asserted

    An attestation is issued only from connector and ledger evidence, signed by a named person and voided by renewed activity.

    Detect

    A high-confidence signal or broken ledger chain opens an assurance event.

    Contain

    AssureCore places relevant actions on HOLD and people decide the scope.

    Preserve evidence

    Ledger, interaction and infrastructure evidence is sealed before clean-up.

    Terminate and attest

    Credentials, sessions and spawned work stop, followed by a 24-hour quiet period by default.

    Assess notification

    A named person records whether a regulator, owner, authority or customer may need notice.

    Review and learn

    Findings create control-change proposals and red-team retests, never automatic rule changes.

    One interaction and attribution chain

    Internal actions resolve definitively. External parties use Observed, Probable and Confirmed evidence tiers.

    ActionAgentFrameworkModel and versionDeployerOwnerDelegating humanAccountable executive

    Follow identity, authority, delegation, action and evidence across the connected architecture.

    Inspect the control plane