The governed path from authority to proof
ControlFrame joins regulatory authority, scoped agent execution, evidence custody, and human release in one inspection path. This reference architecture distinguishes what is implemented, what requires enterprise activation, and what remains planned.
System and trust-boundary map
One governed path. Four inspection lenses.
The value chain from declared authority to portable, human-released proof.
ControlFrame control plane
Workflow orchestrator
Sequential, parallel, conditional, and adversarial workflows emit ordered step and judgment records without granting agents release authority.
- Direct inputs
- Engagement scope · Governed methods · Policy + egress
- Direct outputs
- Legacy collection · Model route
Architecture contract
The boundary remains legible without the diagram.
Implemented means the named code path or record exists. Activation-gated means it requires approved tenant, infrastructure, or provider configuration. Planned means no released execution authority exists.- 01
Declared authority
Source identity and engagement scope enter before execution is permitted.
- Authority sourcesImplemented
- Engagement scopeImplemented
- 02
ControlFrame control plane
Governed methods, policy decisions, and orchestration bind the permitted work.
- Governed methodsImplemented
- Policy and egress gatesImplemented
- Workflow orchestratorImplemented
- 03
Execution and inference
Customer systems, collection protocols, and model routes keep distinct authority.
- Approved customer systemsActivation-gated
- Legacy collection boundaryActivation-gated
- Approved model routeActivation-gated
- Runner v2 execution and custodyPlanned
- 04
Custody and release
Artifacts, human decisions, and recipient editions remain one inspectable record.
- Evidence custodyImplemented
- Human review gateImplemented
- Proof Room and recipient editionImplemented
This map describes a reviewed product architecture. It does not assert a live customer deployment, certification, customer-boundary collection, or current infrastructure topology.