Build, coordinate and operate agents.
Agent Studio, Orchestrator and Mission Control connect models, knowledge, tools, workflows, approvals and execution surfaces inside one agentic platform.
Explore AI AgentsSecurity architecture · current implementation boundary
Createting’s security model is built around tenant boundaries, scoped agent identity, pre-execution policy decisions, approval binding and evidence. This page describes mechanisms present in the current architecture—and states where validation or production hardening is still environment-dependent.
Pre-execution boundary
Runtime actions can carry the action type, target resource, arguments, side-effect state, external/sensitive flags, risk hints, expected effect, data-access summary and target system. The policy gate then returns an explicit decision rather than treating every tool invocation as equivalent.
Security controls
The current Arch2 data plane includes tenant context checks, membership validation and an RLS coverage audit for tenant-scoped tables. The audit can detect missing RLS, missing forced RLS and missing canonical tenant policy instead of assuming isolation is complete.
The architecture includes an agent-identity layer with JWT, DPoP and delegation primitives. Delegated system-agent work is designed to retain an attributable identity rather than collapsing every action into one anonymous backend actor.
The shared ActionPolicyGate covers tool, knowledge, web search, memory write, browser, computer, external API, subagent and artifact actions. Decisions can allow, request approval, deny or hard-deny based on capability state, autonomy and risk.
Approval snapshots are fingerprinted from the action descriptor. A resumed approval can therefore be checked against the prepared action instead of silently authorizing a different replanned request.
The architecture contains persistent workspaces, sandboxed execution, snapshots and staging promotion. Browser and computer sessions are modeled as agent-bound runtime capabilities with recovery, cleanup and environment trace events.
Durable execution, typed state, checkpoint write-through, execution traces and a compliance ledger provide mechanisms for retaining operational context and evidence. Retention and legal-hold behavior still depend on the configured deployment and policy.
What this does not claim
This page does not claim SOC 2, ISO certification, GDPR compliance or another external certification solely because technical controls exist.
Current architecture documentation still marks parts of environment operations and governed runtime hardening as in progress or production-hardening open.
Secrets, provider configuration, deployment topology, identity provider setup, network policy and operational procedures affect the real security posture.
Governance reduces and constrains risk; it does not make autonomous execution infallible.
Current architecture status
Evaluate the boundary
Map the systems it touches, the writes it can perform, the approval owner and the evidence required after execution.