AI agent governance by role, industry and regulation

01By role

Three rooms. Three first questions.

Each page leads with the answer that room needs first, then shows what it sees in the product.

OperatorsCOO, shared services, process owners“Can an agent do this work without anyone losing control of it?”For operators AssuranceCISO, risk, internal audit, legal“Can you show the write could not have happened without the check and the approval?”For assurance BuildersCIO, platform and integration teams“Where does the allow live, and what do I build against?”For builders

02From each seat

The same governed action, seen from three chairs.

Switch tabs to see what each role reads first. Every example is an illustrative specimen.

A person approves it before it happens.

The agent drafts the change. A named approver who is not the requester sees the difference, the gates and the rule version, then commits it or refuses it. No answer in time is a refusal.

For operators

Approvals inbox · 1 waiting for youAwaiting approval

Post purchase invoice PINV-specimen-0418 · ₹4,82,000

Proposed by agt_specimen_ap01 · held at rung 6 AUTONOMY: above the ceiling (A1)

Difference

− status: draft

+ status: posted · record_version 1

+ Dr Purchases (incl. input GST) ₹4,82,000

+ Cr Sundry creditors · Vendor specimen ₹4,82,000

Gates and rules

G1 Ledger · passed
G2 Stock · passed
G3 Permissions · passed
G4 GST · passed
G8 MCA · passed

Declaration decl_gst_purchase · version 4 · policy 2027.06.1

Approve and commitRefuse this write

Shown to usr_specimen_approver only. The requester cannot approve their own change.

Illustrative specimen. Not customer data.

Every action leaves a record you can check.

Sixteen fields, SHA-256, chained to the record before. Recompute it here: change a field and the chain shows it. Tamper-evident at L1.

For assurance

Press “Recompute records 1041–1042” to hash both records with SHA-256 in this browser.

Illustrative specimen. Not customer data.seq 1041 · L1 · Guarded

Rendering · shown beside the record, never a seventeenth field

Outcome: Refused Refused at rung 3 · PRE-GATES
Approver: None. The write stopped before approval.
Refusal code: GATE.PRECONDITION_FAILED (illustrative)
Meter: 0.4 governed action

4 of 16 fields: F01–F03, F14

: tnt_specimen_01
: 1041
: sha256:058169bb8da3e9f6b1b8511193b43b0636ffe1ecc6e4c46ce8a8a905964023f8
: wr_specimen_7c1
: purchase_invoice.post
: decl_ap_purchase
: 4
: 2027.06.1
: agt_specimen_ap01
: agent
: A1
: 00000000-0000-0000-0000-000000000000
: 0
: sha256:5f105d2d818bc7fe36a7c1b7e367196610df5ee6e8d4c5296c9d8cc4b28428d8
: sha256:1d967c9d1c583efd0a3135e57aa1035ebdd5ab4766f0572f10304feae7516d53
: 2027-07-14T10:39:12+05:30

Digest of seq 1041Not yet recomputed in this browser

Checked and recorded by elan1 Govern · tamper-evident (L1)

Record 1042 points back to record 1041 by digest (F03 prev_digest).

Illustrative specimen. Not customer data.seq 1042 · L1 · Guarded

Rendering · shown beside the record, never a seventeenth field

Outcome: Committed Committed at rung 7 · ACT
Approver: usr_specimen_approver, a named person who is not the asker
Refusal code: None
Meter: 1 governed action

4 of 16 fields: F01–F03, F14

: tnt_specimen_01
: 1042
: sha256:8e37839e9548dfa9a4a8948b723c1517afb532a7eaceb617a7db6eff0ffdeac0
: wr_specimen_7c2
: journal_entry.post
: decl_month_end_close
: 7
: 2027.06.1
: usr_specimen_approver
: human
: A2
: je_specimen_5531
: 2
: sha256:e1eb0d8f0a7399695abf290e8fd2b6abc738ffd2fbdb8297f9ae44eb1a32ab6a
: sha256:fd8e4d0b12b24bf22a591e735f211d8d7bb2bdf480058fdf89bb9d44666b2633
: 2027-07-14T10:42:07+05:30

Digest of seq 1042Not yet recomputed in this browser

Checked and recorded by elan1 Govern · tamper-evident (L1)

Next record · seq 1043 · F03 prev_digestsha256:f2423aa3d4559b7fd54b390a724f2a989744c10db034caa4a0e047cb5aca2c18

Verify offline (simulated)

L2 · Available Simulated here. The real check runs in the free offline verifier.

01
Signature
Check the Ed25519 signature on record 1042 against the residency domain's public key, obtained out of band.
02
Anchoring
Check the Merkle root that contains record 1042 against timestamps from two RFC 3161 authorities, anchored within 15 minutes.
03
Evidence bundle
Open the eight-member evidence bundle and run the free offline verifier, elan1-verify, on your own machine with no network.

At L1 records are hash-chained, not signed, and the check needs elan1. The three steps above describe the L2 design. Nothing on this page was signed or anchored.

How the browser recomputes: the preimage is the 19-octet domain string elan1.proof.seal.v6, then each of the 16 fields as a 4-octet big-endian length followed by its bytes. SHA-256 runs through WebCrypto on this device; nothing is sent. Where this is weak: the specimen encodes every field as UTF-8 text, while Seal v6 encodes identifiers and digests as fixed binary octets. It shows the method, not a production verifier.

One write path. Two legal crossings.

Work and Decide reach Govern through KernelPort; Run carries every call under contract. One KernelPort call, read three ways.

For builders

An accounts-payable agent at Kolam Components* proposes posting purchase invoice pinv_specimen_0418 for ₹4,82,000. It sends a typed write intent through KernelPort’s assert call. elan1 Govern runs the Right Path. At rung 3 the GST gate (G4) finds that the invoice charges 12% where the rate table says 18%, so the write is refused with a typed code.

No model took part in the check. The proof record is still written, and the meter shows 0.4 of a governed action: ₹0.64 at L1, beyond the allowance.

// KernelPort v1 · assert · illustrative
{
  "kernelport": "v1",
  "call": "assert",
  "write_intent": {
    "write_id": "wr_specimen_7c3",
    "tenant_id": "tnt_specimen_01",
    "write_type": "purchase_invoice.post",
    "declaration": { "id": "decl_gst_purchase", "version": 4 },
    "actor": { "id": "agt_specimen_ap01", "kind": "agent" },
    "autonomy_level": "A1",
    "target": { "record_id": "pinv_specimen_0418", "expected_version": 0 },
    "payload": {
      "vendor": "vnd_specimen_0091",
      "amount_inr": 482000,
      "hsn": "8483",
      "gst_rate_pct": 12
    }
  }
}

// response
{
  "outcome": "refused",
  "code": "G4_GST_RATE_MISMATCH",
  "rung": "3 PRE-GATES",
  "seal": "elan1.proof.seal.v6",
  "seq": 1043,
  "metered_inr": 0.64   // 0.4 of a governed action, at L1 beyond the allowance
}

Payload fields are examples, not the published schema. Frozen identifiers: kernelport/v1, elan1.proof.seal.v6, action-receipt/1.

Illustrative specimen — not customer dataL1 · Guarded

Proof record · Seal v6 · 16 fields “no seventeenth field, ever”

F01tenant_id: tnt_specimen_01
F02seq: 1043
F03prev_digest: sha256:4be1…90c7
F04write_id: wr_specimen_7c3
F05write_type: purchase_invoice.post
F06declaration_id: decl_gst_purchase
F07declaration_version: 4
F08policy_version: 2027.06.1
F09actor_id: agt_specimen_ap01
F10actor_kind: agent
F11autonomy_level: A1
F12record_id: pinv_specimen_0418
F13record_version: 0
F14payload_hash: sha256:c03a…11fe
F15lexicon_hash: sha256:e2c4…0b16
F16recorded_at: 2027-07-14T10:44:51+05:30

Refused · typed code G4_GST_RATE_MISMATCH (illustrative) · proof record written · metered: 0.4 governed action

when · who · hash — checked and recorded by elan1 Governtamper-evident (L1)

Illustrative specimen. Not customer data. *Kolam Components is a fictional company; all data is illustrative.

03By industry and by regulation

Configured for the industry, not rebuilt for it.

Packs configure elan1 Govern; they are never separate products. Regulation pages say what we help evidence and what we do not cover.

By industry

Banking and financial servicesAML alerts, KYC and disputes, routed by risk.InsuranceRoutine claims routed; unsure ones to a person.Accounting firms (elan1 Work for small firms)For CA practices and the books they read.

By regulation

EU AI ActWhat we help evidence; what we don't.ISO/IEC 42001Evidence for your system; no certification implied.NIST AI RMFMapped to the four functions, with gaps.India DPDP Act 2023Residency, records and our role under the Act.

Regulation pages explain; they are not legal advice. elan1 holds no certificate against any framework.

04Available today

Here is what you can check before you talk to us.

Ungated, no email needed

SpecimensIllustrative proof records, labelled as such.What we claimEvery claim with its level and status.What’s nextFuture improvements, in order. No dates.Readiness checkTwelve questions. A plain result. Nothing stored or sent.

// NEXT STEP

Bring the question your room asks first.

Tell us the process, the record it changes and who signs off today. A person replies within 2 working days.

Talk to us See a governed action Become a design partner

Start with the question your room asks first.