A risk read before it runs, kept
What kind of action, whether it can be undone, whether it reaches outside, whether it touches credentials. Read at the surface before it runs, written into the record, never guessed after the fact.
Why the record matters
A logbook you can write a policy against.
A normal audit log is testimony, and nobody can insure testimony. Carriers underwriting agentic AI cannot price a behavioral loss, the kind where the agent did the wrong thing while correctly authenticated, because no record exists to price it from. This one does.
Insufficient data is an answer
The scoring engine is actuarial math, not a language model. It reports not enough evidence rather than manufacture a number, so every figure it gives carries the conditions it is entitled to exist under.
Insurable without handing over the data
The score is computed where the evidence lives, on your infrastructure. The score can go to an underwriter. The record it came from never has to. Priced risk is what makes AI usage insurable.
Human authority
Risk friction where it matters
Routine actions flow without ceremony. Consequential, credential-bearing, outward-facing, or hard-to-reverse actions meet warning, attestation, approval, or a hard stop.
- AuditRoutine work flows. The risk read and the record are written anyway.
- WarningThe step is flagged to the person responsible and recorded.
- AttestationA person states the reason before the step runs.
- ApprovalThe step waits for a named person to approve it.
- Hard stopThe step does not run, and the refusal is part of the record.
Every action gets a risk score that declines to score when evidence cannot support it, and any action can meet a hard stop. Whether a step outside its permissions is refused, flagged, or only logged is a setting you control.