Shivanath Devinarayanan · Updated
On this page
The control plane is the front door for every tool call and every model call. On-behalf-of identity travels with the request. Relationship-based access (ReBAC) decides whether this person, through this agent, may touch that record. Rate buckets stop a loop from burning the commit. A named reviewer sits on the write.
The agent is rarely the risk. The write is. Reads are cheap. A CRM mutation, a payment, or a compensation field is legal and financial liability. Session isolation, field-level redaction, and semantic checks happen before the tool runs, not as a prompt instruction. Salesforce-shaped policy detail lives on Agentforce governance . The paid offer is AI Agent Governance .
Why it matters
A private pipe around the gateway is how a demo becomes an incident. Each runtime with its own key, log, and bill is fragmentation. The control plane is how the next agent is copyable: it inherits identity, rate, and trail on day one.
OpenFGA-style relationship tuples beat a role string in a prompt. The gateway can refuse. The model cannot be trusted to refuse. MuleSoft Agent Fabric is the public product name for that front door when Salesforce integration is in the picture.
In a generic org
Finance asks a digital worker for a compensation view. The control plane sees a restricted record class. The session is isolated. The agent acts as the named manager, not a shared robot user. A pre-tool check strips fields the policy does not allow. The write waits on a human in Slack. If the hop budget is exceeded, the request dies instead of looping.
Govern the write
Cryptographic on-behalf-of forwarding keeps the user identity on every hop. Tokens narrow: audience is the next component only. Rollback is a property of the durable plane. The control plane decides whether the write is allowed. The state machine decides how to unwind it. Owners, gateway hops, and sensitive-work isolation in the Salesforce cluster remain on named owners , one front door , and sensitive work .
Stack
- MuleSoft Agent Fabric
- Flex Gateway
- OpenFGA
- ReBAC
- On-behalf-of
- Token buckets
- Pre-tool checks
- SOC 2 trail
How to hire
Hiring starts with a governed production agent on one documented job, then a consultation.
Bring one documented job. Start at stand up production AI agents , then book a consultation . Agentforce is the Salesforce runtime: Agentforce that stays in production .
SHIVANATH DEVINARAYANAN · SALESFORCE MVP HALL OF FAME ·
SD
SHIVANATH DEVINARAYANAN · SALESFORCE MVP HALL OF FAME ·
SD
Home · About · Services · Portfolio · Success Stories · Writing · News · Events · Contact · Media kit · Privacy Policy