Operating model

Control-plane concepts

Aegis separates inherent risk, residual risk, control readiness, and runtime enforcement.

Asset graph

AI assets represent agents, models, datasets, prompts, tools, MCP servers, vendors, APIs, and deployments. Relationships show reachability and blast radius.

Evidence graph

Evidence records carry source, collection method, digest, freshness, validity, linked controls, and historical use in approvals.

Progressive enforcement

Policies move through Observe, Simulate, Warn, Hold, and Block. Mode changes require attributable approval and emergency procedures.

Aegis provides governance and security decision support, not legal certification. Confirm applicability and exceptions with accountable human reviewers.