Governed calls
Every prompt, response and tool call, inspected before it proceeds
1,284,902
Governed calls today
4,871
Redacted in the path
312
Blocked
6
Stepped up to a verified human
| Time | Verified human | Agent | Route / tool | Decision | Tokens saved | Trust stage |
|---|
Dana Reyes · Payroll Operations Manager
Verified human, directory entitlements, delegated agent
Layer 1 · Verified identity
Assurance
APERION Identity Proofing · NIST IAL2/AAL2
Proofed
2026-03-14, biometric, live
Credential ref
vid:mm:8f21.c4a9
Step-up enabled
Yes, live face check
Layer 2 · Access governance (customer directory, read only)
Groups
Payroll-AdminsFinance-US
Sync
Bidirectional SCIM · last 14:29
System of record
Customer directory for humans; Smartflow for agents
Layer 3 · Agent credential · payroll-ops-agent-07
Delegated to
Dana Reyes (inherits entitlements)
Action scopes
payroll.read_runpayroll.draft_adjustmentpayroll.initiate_wire
Transaction limit
$25,000 per wire
Account allowlist
Payroll operating · ending 4417
Issued
2026-06-02 · expires 2026-12-02
Trust stage
STANDARD since Aug 19
Clean telemetry
61 days · 0 violations
Behavioral baseline
Weekday runs, Friday close, no bonus wires
Dana Reyes · verified → Payroll-Admins → payroll-ops-agent-07 → scoped actions
Under the hood, this is an AIDA credential: Ed25519, carried as X-Aida-Credential. Scopes live on the credential. They are not a system prompt the model can talk itself out of.
Call 14:31:04 · payroll-ops-agent-07 → route: finance-summary
Decision REDACT · policy PII-US-01 · last 4 and zip only
Sent by the agent
Summarize payroll exceptions for the Friday close.
1. Alvarez, J. (SSN 612-48-9031) — salary $184,000, retention-risk flag in HR feed 09/10. Home address on file: 1420 Willow Ct, Hartford CT.
2. Chen, R. — overtime variance +14%, approved by manager.
3. Oduya, F. — new hire, first run, benefits pending.
Recommend adjustments and draft the exception memo.
Delivered to the model
Summarize payroll exceptions for the Friday close.
1. Alvarez, J. (SSN ***-**-9031) — salary [REDACTED], retention-risk flag in HR feed 09/10. Home address on file: zip 06106.
2. Chen, R. — overtime variance +14%, approved by manager.
3. Oduya, F. — new hire, first run, benefits pending.
Recommend adjustments and draft the exception memo.
Policy PII-US-01Full SSN, compensation, street address. Last 4 and zip may remain.
Action REDACTStrip, do not substitute. The model never gets a look-alike SSN or a fake street.
SSN confirmIf the run needs the number, Dana types it later in Payroll Ops. That step posts to HR, not to the model.
Inline, both directions. Not a DLP paste box. Originals stay in the audit row for Dana and the examiner. The provider never saw them.
MCP call 14:31:52 · payroll-ops-agent-07 → payroll.initiate_wire
Connection terminated at JSON-RPC; arguments inspected before execution
{ "jsonrpc": "2.0", "method": "tools/call",
"params": { "name": "payroll.initiate_wire",
"arguments": {
"amount": 50000.00, "currency": "USD",
"payee": "Alvarez, J.", "account": "…4417",
"memo": "retention bonus" } } }
Account allowlist · payroll operating ending 4417Passed
Action scope · payroll.initiate_wirePassed
Transaction limit · $25,000 per wireExceeded · $50,000
Behavioral score · bonus wire, Friday, no approval event0.91 out of pattern
DecisionSTEP-UP → routed to Dana Reyes
Smartflow terminates the MCP connection and reads the call, not the TLS pipe. Same idea as Shield on a laptop: inspect the tool arguments, then decide. Policies TXN-LIMIT-01 v14 and BEHAV-ANOM-03 v9.
APERION Identity Proofing
payroll-ops-agent-07 wants to wire
$50,000.00
to Alvarez, J. · memo “retention bonus”
Live face check required. A recording will not pass.
Ledger record mm-0f3a…91c · Regulatory Examination Suite
Tamper-evident, hash-chained, identity-bound
Verifiable AI Statement · record detail
record
mm-0f3a4c1e.91c
previous hash
9b76e2d10a4c81e0
this hash
e41a77f38c91b2d4 · chain verified
human
Dana Reyes · vid:mm:8f21.c4a9
agent
payroll-ops-agent-07 · delegated 2026-06-02
action
mcp payroll.initiate_wire · $50,000.00
policy fired
TXN-LIMIT-01 v14 · BEHAV-ANOM-03 v9
disposition
STEP-UP · awaiting human
adjudicated
held · live face check required
trust change
STANDARD · unchanged until decision
content
arguments retained; payload never left
tenant
Meridian Mutual · on-premises US-East
HMAC-SHA256 chain. An examiner can clone audit-verifier (MIT) and check this segment on a machine that never talked to us.
Scope: incident 14:31:52 to 14:32:07 · 6 events
Click Generate package. Same evidence, different template.
Model spend · governed vs baseline
Same inspection point, second budget
20–30%
Net reduction in AI spend on mixed workloads
62%
Semantic cache hit rate by day 90
34%
Of the average payload removed through compression
Up to 80%
Provider-side cost reduction on cache-eligible traffic
Spend this month, baseline (grey) vs governed (teal)
Semantic cache hit rate · first 90 days
Observed across design-partner deployments over 90-day windows. Results are workload-dependent and should be measured on the customer's own traffic during a scoped POC.
MetaCache is the semantic cache. Compression is on the wire before the provider bills tokens. No latency or uptime number on this screen, on purpose.
The chain is the product
Runs inside the customer's walls, in a compiled binary, in any jurisdiction they operate in. No prompt transits APERION.
Layer 1 · integrated
Verified identity
Biometric proofing of the human to NIST IAL2/AAL2. Live step-up at the moment of risk. APERION Identity Proofing.
Layer 2 · integrated
Access governance
The customer's directory scopes the authority. Read, synced, never replaced.
Layer 3 · APERION
Runtime governance
Smartflow binds every agent to a verified human and adjudicates every prompt, response and tool call before it proceeds.
Layer 4 · APERION
Audit and evidence
Tamper-evident record. Examiner-shaped packages on demand. Regulatory Examination Suite.