Business-facing evidence packages for governed AI-agent deployment.
A lightweight public schema, validator, and markdown renderer for summarizing AI-agent runtime governance evidence — what an agent is deployed to do, which tools and systems it can access, which actions require authority or review, what was blocked, what sources were relied on, what replay bundles exist, what validation results are available, what exports were redacted or signed, and what risks remain open.
Security, risk, compliance, audit, and executive teams need business-readable evidence. Raw logs and technical traces are not enough. They need a structured summary of the agent's purpose, deployment context, action surface, authority model, controls, blocked actions, reliance records, replay bundles, validation results, redacted exports, risks, and review history.
Raw run records and traces assume engineering context that governance and executive reviewers do not have.
Manifests, control-plane records, and replay bundles live in different systems with no single review surface.
Risk and compliance owners need plain-language summaries tied to controls, not raw records they must interpret.
Deployment approvals are recorded inconsistently, so there is no standard artifact behind a go or no-go.
Audits need stable references from findings back to the underlying runtime evidence.
There is no consistent way to summarize whether an agent is ready to deploy and what risks remain open.
A plain-language description of what the agent is deployed to do.
Where and how the agent runs, and which systems it touches.
The tools the agent can access, summarized for review.
The actions the agent may propose, with their types.
How authorization is required and granted across actions.
The runtime controls in place and what they allow or block.
What was blocked during operation, and why.
The sources the agent relied on across recorded runs.
Which replay bundles exist and what they cover.
The validation results available for the recorded evidence.
What was redacted in the exported evidence, and how.
Open and resolved risks associated with the deployment.
Who reviewed the agent, when, and with what outcome.
Renders the pack to markdown for review and distribution.
Agent Governance Evidence Pack is the Evidence layer. It translates manifests, control-plane run records, and replay bundles into business-facing review material for governance, risk, security, compliance, audit, and executive stakeholders.
Need a business-readable summary of an agent's deployment posture and open risks.
Need a consistent review artifact tying runtime evidence to business controls.
Need to understand what an agent does and whether it is ready to deploy.
Need structured references from the summary back to underlying runtime evidence.
Need to translate runtime records into material governance stakeholders can review.