06 — Control
Security & control
The more a system can act, the more it needs an enforceable boundary.
When software starts acting for the company, security is no longer only firewalls. We care about identity, least privilege, prompt injection and tool abuse, leakage, and accountability once model output enters the business.
The control plane manages agents like service accounts: allow-lists, action approval, context isolation, output filters, full traces. Governance is the condition that lets an agent into production at all.
In practice
Application and data security
Identity, secrets, partitions, classification and redaction — a platform that can survive an audit.
Agent control plane
Allow, deny, escalate, replay. Every tool call has an owner and a policy.
A compliance cadence
Controls, records and incident response that can be inspected under Hong Kong and the client’s home requirements.