Five surfaces, one question
Most enterprise agent programmes fail because the governance layer and context-graph integration are missing — alongside the security of the whole agentic and GenAI stack. These are the surfaces that work touches. The question underneath all five is the same: can you prove what it did?
Agent protocols & orchestration
The plumbing that decides whether multi-agent work is reliable or merely impressive.
Tool and agent-to-agent protocol design · Control plane / data plane separation · Idempotency, retries and compensation
Context graphs & permission-aware retrieval
Grounding agents in enterprise knowledge without quietly dismantling a decade of access control.
Permission-aware retrieval · Purpose limitation · Minimum necessary
Security of the agentic stack
Trust boundaries, egress, secrets and adversarial pressure across the whole agentic and GenAI landscape.
Non-human identity and least agency · Trust boundaries · Egress control
Sovereign & open-weight AI
Owning the intelligence and the context, rather than renting both and hoping.
Data and model sovereignty · Residency and cross-border inference · Open-weight evaluation
Model risk & validation for agents
Validation frameworks written for systems that score, applied to systems that act.
Federal Reserve SR 11-7 / OCC 2011-12 · NIST AI Risk Management Framework · Effective challenge
The surfaces are the stack. The four layers are the method.
These five are where the work happens. The four layers — entitlements, policy enforcement, attestation, model risk — are how any one of them is governed once it exists. Agent autonomy, governance and the protocols underneath are what make advanced agent work in an enterprise actually possible; the layers are what let you answer for it afterwards.
Where a capability is bought rather than assembled, see engagements. Where the regime decides what evidence you owe, see sectors.
If any of this is live for you
The fastest route is a conversation. Bring the architecture you are worried about — the first useful thing usually surfaces inside twenty minutes.