Shivanath Devinarayanan · Updated
On this page
Four policy families: identity, field, row, action. Ship in stages: keywords, regex, then meaning. Sensitive data is a pre-tool check, not a prompt instruction. Row-level policy exists before a Slack demo of a restricted worker.
The paid operating-model offer remains AI Agent Governance . Four policy families: identity, field, row, action. Identity hops are on identity . Restricted records are on sensitive work .
- Identity Who the agent is, whose authority it uses, and which IdP that hop trusts. Identity policy exists before the first Slack demo.
- Field Which fields may enter a prompt or a tool call. Sensitive data is a pre-tool check, not a prompt instruction to "be careful".
- Row Which records this identity may see. Row-level policy exists before a restricted worker is shown in a channel.
- Action Which tools may fire, at what rate, and with which human on the line. Action policy is the last gate, not a log after the fact.
The four family names
- Identity. Who the agent is, whose authority it uses, and which IdP that hop trusts. Identity policy exists before the first Slack demo.
- Field. Which fields may enter a prompt or a tool call. Sensitive data is a pre-tool check, not a prompt instruction to "be careful".
- Row. Which records this identity may see. Row-level policy exists before a restricted worker is shown in a channel.
- Action. Which tools may fire, at what rate, and with which human on the line. Action policy is the last gate, not a log after the fact.
Ship in stages
- Keywords Ship first. Cheap, reviewable, and honest about what they miss.
- Regex Patterns for identifiers, amounts, and known secret shapes. Still deterministic.
- Meaning Model-assisted classification only after the first two stages have an owner and a test.
How to hire
Hiring starts with a governed production agent on one documented job, then a consultation.
Start at First Agent in Production , then book a consultation .
SHIVANATH DEVINARAYANAN · SALESFORCE MVP HALL OF FAME ·
SD
SHIVANATH DEVINARAYANAN · SALESFORCE MVP HALL OF FAME ·
SD
Stand up the first production agent
Hiring starts with a governed production agent on one documented job, then a consultation.
Home · About · Services · Portfolio · Success Stories · Writing · News · Events · Contact · Tools I use · Media kit · Privacy Policy