Fail closed means uncertainty does not become authority.
Missing, stale, held, or expired evidence blocks the affected operation. Unknown outcomes remain unresolved until reconciled; authorization never fills an evidence gap.
AI GOVERNANCE
The model can interpret. Only the platform can authorize.
AI can interpret intent and propose a structured plan. Identity, permissions, eligibility, approval, execution, and completion remain deterministic platform controls; the model holds no provider credentials.
Governed sequence
Authority stays outside the model from plan through completion.
- 01
Intent is not authority
Natural language becomes a versioned, inspectable plan.
- 02
Approval binds the exact plan
Material changes invalidate the approved plan.
- 03
Only registered operations can run
The model cannot invent capabilities, credentials, or authority.
- 04
Execution is separated from conversation
A separate worker runs the authorized operation.
- 05
A provider response is not completion
Where supported, destination state is read back and reconciled.
- 06
Capability status expires and fails closed
Stale or changed capability evidence blocks eligibility.
Common questions
Intent, authority, execution, and certification.
No. A request becomes an explicit plan evaluated against registered capabilities, permissions, policy, and deployment status.
No. The model proposes a plan; provider authority, dispatch, account binding, and completion remain outside it.
Not necessarily. An operation may require human approval or satisfy a bounded policy authorization, depending on its deployment.
Material changes to the operation, target, payload, conditions, exclusions, or plan version invalidate the prior approval.
Provider acceptance alone is insufficient. Where supported, Enterprise Hub reads back the destination and records a reconciled outcome.
Certification is specific to the operation, provider, version, environment, tenant, and deployment—not every catalog item.
Inspect the authorization boundary.
See how intent becomes a plan and authority remains outside the model.
Source-linkedExact approvalVerified outcome
Detect
Plan
Authorize
Verify
Capabilities are enabled and certified by operation, provider, tenant, and deployment.