ARCHAI WORLD™

ARCHAI WORLD CORE / PROOF OF CONTROL

What has this agent actually earned permission to do?

An approval should identify the purpose, configuration, evidence, boundaries, and accountable owner behind an agent’s authority. Proof of Control brings these elements into a reviewable workflow.

Capability preview · Illustrative demonstration

01 / SIX CAPABILITIES

What Proof of Control brings together

Business impact map

Risk addressed

Hidden dependencies and operational disruption.

Customer action

Connect the agent to business processes, systems, data, and accountable owners.

Evidence produced

Dependency map distinguishing verified facts, assumptions, and missing information.

Portfolio connection

Studio + Enterprise Context MCP

Agent operating permit

Risk addressed

Excessive authority and unclear accountability.

Customer action

Define permitted actions, restrictions, required approvals, and expiry.

Evidence produced

Versioned approval record with scope and named owner.

Portfolio connection

Studio + enforcement in connected systems

Failure rehearsal

Risk addressed

Unreliable outputs and broken workflows.

Customer action

Test fabricated evidence, unavailable tools, duplicate requests, and escalation failures.

Evidence produced

Test results, failed controls, and remediation actions.

Portfolio connection

Studio missions

Human judgment assessment

Risk addressed

Ineffective oversight.

Customer action

Practice recognizing problems, stopping actions, and escalating decisions.

Evidence produced

Scenario results and reviewer feedback.

Portfolio connection

University + Proof of Judgment

Change-triggered review

Risk addressed

Approval becoming invalid after changes.

Customer action

Review changes to models, tools, permissions, policies, and dependencies.

Evidence produced

Change record and reassessment decision.

Portfolio connection

Studio + supported integrations

Evidence dossier

Risk addressed

Decisions that cannot be explained or reviewed.

Customer action

Review test evidence, unresolved gaps, and accepted residual risks.

Evidence produced

Exportable decision dossier with owners and review dates.

Portfolio connection

Studio + ARCHAITECTS

02 / INTERACTIVE EXAMPLE

Can this agent change a supplier’s bank details?

Explore a fictional procurement scenario using synthetic information. No payment system is connected.

Request

“Please replace the supplier’s bank account before the next payment run.”

Scenario

Conflicting evidence

Business consequence at stake

The request conflicts with the supplier record, creating a risk of paying the wrong account.

Expected agent behavior

Hold the proposed change and require independent verification before proceeding.

Control required in the connected system

Block the update until a second, independent source confirms the new bank details.

Required human decision

A named reviewer decides whether the conflict is resolved or the request is rejected.

Evidence that should be retained

The original record, the conflicting request, and the verification outcome.

SIMULATED — These outcomes illustrate expected behavior. No live control has been tested.

03 / EXAMPLE OPERATING PERMIT

A fictional permit alongside the scenario

This is a fictional example. It does not present the permit as a certification.

Agent

Supplier Change Assistant

Purpose

Review supplier bank-detail change requests.

Permitted

  • Read approved supplier records.
  • Compare supporting evidence.
  • Prepare a proposed change.
  • Request independent verification.

Restricted

  • Change bank details without the required approval.
  • Release payments.
  • Approve its own request.

Accountable role

Procurement Operations Owner

Approval role

Authorized Finance Reviewer

Validity

Limited to the reviewed configuration and approval period.

Reassessment triggers

Changes to model, tools, permissions, relevant policy, or verification dependency.

This permit documents the decision. Technical restrictions require enforcement in the connected application or service.

04 / CONTROL EVIDENCE STATUS

Three separate evidence categories

DOCUMENTED

The intended control and responsible owner are recorded. Operation has not been demonstrated.

SIMULATED

The behavior was exercised in an isolated scenario. This does not establish production enforcement.

VERIFIED IN A CONNECTED ENVIRONMENT

A dated test demonstrated the specified control in an identified environment and configuration. Verification is limited to that test scope.

Approval states (separate from evidence status)

DraftIn reviewApproved with conditionsReassessment requiredSuspendedExpired

All example controls on this page remain DOCUMENTED or SIMULATED. Evidence status and approval status are not the same thing.

05 / EXAMPLE EVIDENCE DOSSIER

An illustrative sample dossier

ILLUSTRATIVE SAMPLE — NOT A LIVE APPROVAL OR CERTIFICATION.
Agent identity and purpose

Supplier Change Assistant — reviews supplier bank-detail change requests.

Reviewed configuration

Read-only access to supplier records; verification request enabled; execution disabled.

Business dependencies

Payment run schedule, supplier master data, independent verification service.

Relevant policy references

Procurement change-control policy, segregation-of-duties standard (fictional references).

Test cases and outcomes

Conflicting evidence: held. Verification unavailable: escalated. Approval withdrawn: rejected.

Unresolved gaps

Independent verification service does not yet report confidence level with each response.

Human assessment results

Reviewer correctly escalated 3 of 3 scenarios in a supervised walkthrough.

Decision and conditions

Approved with conditions: verification service must report a confidence level within one quarter.

Accountable owner

Procurement Operations Owner

Approval and expiry dates

Approved 2025-01-01. Expires 2025-07-01 or at the next reassessment trigger.

Reassessment triggers

Changes to model, tools, permissions, relevant policy, or verification dependency.

This example uses fictional content clearly labeled as such. It is not a live approval or certification.

07 / FAQ

Questions worth asking before you trust this

No. MCP supports connections between applications and tools. Authorization and control enforcement require implementation in the relevant systems.

09 / NEXT STEP

Bring one agent. Examine one decision. Identify the missing evidence.

Start with a bounded workflow and a clear owner. Establish what must be tested before expanding the agent’s authority.