Establish identity
Define who the agent represents, which enterprise permissions it inherits, and who remains accountable.
Back to Technology
Enterprise Agent Foundation
Security & Governance
Keep every action within identity, access, and accountability boundaries.
Embed identity, least privilege, progressive context disclosure, human approval, and audit into agent operations so proactive action remains governed and traceable.
How It Works
Control before, during, and after every action.
Governance is not a post-run check. It is a continuous control chain spanning identity, context access, tool execution, and write-back.
Disclose context progressively
Provide only the information required for the current step, based on task, identity, and risk.
Guard and approve action
Use least privilege, execution guardrails, and human approval to govern tool use and consequential actions.
Audit and write back
Record provenance, access, calls, approvals, and outcomes before governed write-back into enterprise context.
In Production
Its role inreal enterprise work.
Expand automation for lower-risk work
Use identity, least privilege, and tiered authorization to let reversible, lower-risk work advance autonomously within explicit boundaries.
Reduce exposure of sensitive information
Disclose only the context and tools required for the current step instead of exposing unrelated data and permissions at once.
Keep consequential action explainable and accountable
Connect provenance, policy decisions, approvals, and outcomes into audit evidence for security review, investigation, and accountability.
Validation & Guardrails
Proactivity does not change enterprise accountability.
Agents can proactively identify and advance work, while consequential actions still require explicit authorization, stopping conditions, and human accountability. System controls and compliance certifications serve different roles.
Default-deny capability allowlists
Tools, data, and actions not explicitly authorized for a task remain unavailable by default; new capabilities require scoped security review.
Policy versioning and regression
Version access, approval, and stopping policies, then continuously test them against overreach, prompt injection, and abnormal tool outcomes.
Controls and compliance
This page explains technical controls; certifications, policies, and legal commitments retain their formal scope on Security & Compliance.
Connected Technology
Every capability,working as one system.
Models, context, runtime, and enterprise foundations work together to move agents from understanding to reliable action.
01
GEA Architecture
Context System
Turn enterprise knowledge into durable memory agents can understand and use.
Learn more02GEA Architecture
Long-Horizon Agent Runtime
Keep work moving toward long-horizon goals and outcomes.
Learn more03Enterprise Agent Foundation
Enterprise Integration & Deployment
Bring agents into existing systems—not another isolated stack.
Learn moreTechnical questions
Understand the mechanism, boundaries, and production requirements.
01
How does an agent identity inherit human permissions?
An agent should operate through an explicit delegation representing a user or service identity, constrained by user access, task scope, and tool policy. Delegation can narrow or segment authority, but cannot grant capabilities the delegating identity did not have.
02
How are access boundaries preserved across multiple agents?
Each agent and tool call retains its own identity, input provenance, and authorization scope. Context and outcomes are revalidated at handoffs so one agent cannot implicitly transfer its authority to another.
03
How do security and governance differ from security and compliance?
Security and Governance explains system mechanisms such as identity, access, approvals, execution guardrails, and audit. Security and Compliance describes policies, certifications, and legal commitments. They support but do not replace each other.
Ready when you are