Get StartedGovernance for industrial control systems and operational technology: setpoint sources validated against a registered allowlist, safety systems watched, how far one session can reach capped, and a record for the frameworks that regulate critical infrastructure.
Every setpoint change is validated against the operator workstations registered as authorized for that controller, so a change made from anywhere else is refused and recorded. Process variable deviation and replayed sensor readings are flagged against per-controller behavioral baselines, even when the screen looks normal.
A bypass or a force command on a safety instrumented system is caught against the controller's behavioral baseline, attributed to the agent that issued it, and written to the tamper-evident record, so the last line of defense is never quietly switched off without a trace.
The number of distinct systems a single session may traverse is capped by a server-registered limit, and the action that would cross the cap is refused rather than reviewed later. Lateral movement between corporate networks and control systems is flagged against per-agent behavioral baselines and written to the record.
Concrete ways an agent goes wrong here without governance, and the control that catches each one.
A controller receives a setpoint change from an unauthorized source, outside any maintenance window, the pattern behind a water-treatment tampering attempt. Source validation refuses the change and records it, instead of the process drifting while operators see nothing wrong.
An attacker feeds normal-looking sensor data to operators while the physical process is pushed past its limits, the pattern that once destroyed centrifuges. Statistical checks catch frozen values and impossible jumps and raise the alarm.
A safety instrumented system is put into bypass outside an approved procedure, the setup behind an attack on a petrochemical plant. The bypass is caught against the controller's behavioral baseline and flagged, with the agent that issued it named in the record, before the safeguard is gone when it is needed.
An agent begins reaching from the corporate network toward the control zone, the uncertainty that once forced a multi-day pipeline shutdown. The session's traversal cap refuses the crossing that would take it past the registered number of distinct systems, and the denial is logged, so isolation is provable rather than hoped for.
A fault threatens to cascade across interconnected process units. Repeated emergency shutdowns inside the registered cascade window are blocked before the next one lands, and one command halts every governed controller, confirmed, so a single failure does not propagate into physical damage.
Expand any framework to see what it means and what Agentomy provides.
A tamper-evident, hash-linked trail of every governance decision, exportable to the framework your auditors care about. No error codes; plain-English reasons for every allow and deny.
| Agent | Type | Status | Module | Score |
|---|---|---|---|---|
| process-research-agent | Process | Active | RuntimeMonitor | 92 |
| maintenance-triage-agent | Maintenance | Active | AuditLogger | 88 |
| supplier-review-agent | Procurement | Monitored | PermissionRouter | 74 |
| yield-extract-agent | Quality | Quarantined | HaltProtocol | 41 |
| safety-draft-agent | Safety | Monitored | EthicsConstraint | 79 |
| shift-report-agent | Reporting | Active | DecisionLog | 90 |
| Agent | Action | Policy | Result | Time |
|---|---|---|---|---|
| PermissionRouter | data_access_request | vendor-access | Blocked | 12:42:08 |
| AuditLogger | output_validation | audit-trail | Allowed | 12:41:54 |
| TrustScorer | policy_check | runtime-score | Allowed | 12:41:37 |
| RuntimeMonitor | behavior_drift | drift-threshold | Flagged | 12:40:58 |
| HaltProtocol | halt_initiated | unsafe-action | Blocked | 12:40:21 |
| EthicsConstraint | prompt_review | restricted-output | Flagged | 12:39:46 |
| DecisionLog | evidence_recorded | decision-proof | Allowed | 12:39:12 |
| Block | Timestamp | Agent | Action | Tier | Hash |
|---|---|---|---|---|---|
| 46,483 | Today 12:42:08 | process-research-agent | data_access_request | Evaluator | c5d6fad023d0ca55 |
| 46,482 | Today 12:41:54 | maintenance-triage-agent | output_validation | Analyst | ef41fa5ec3e82552 |
| 46,481 | Today 12:41:37 | supplier-review-agent | policy_check | Builder | 865eb2975de44b00 |
| 46,480 | Today 12:40:58 | yield-extract-agent | behavior_drift | Operator | cb371f0052d75016 |
| 46,479 | Today 12:40:21 | safety-draft-agent | halt_initiated | Strategist | 24399acfcc3c5891 |
| 46,478 | Today 12:39:46 | shift-report-agent | prompt_review | Evaluator | a777ad94409e09c5 |