Compliance

What this site implements for the autonomous agents it governs, stated plainly.

Phase 1 scaffolding. The intended controls are identity-centric access with least privilege, real-time governance of agent actions within defined authority boundaries, human-in-the-loop checkpoints for high-risk decisions, tamper-evident audit logs, and encryption of sensitive data in transit and at rest. No compliance standard is claimed on this page. HIPAA, GDPR and SOC 2 are auditable standards rather than descriptions, and a claim that the site meets one will appear only when the corresponding controls are live and can be demonstrated.