-
C01 Operating models
- Single-tenant operation and other deployment models are available according to the agreed product scope and infrastructure. The architecture is documented before delivery starts.
-
C02 Agent identity
- Agents receive distinct identities and least-privilege access to the sources and tools they need. Permissions follow the actual system integration.
-
C03 Human approval
- Business-critical, legal, safety-related, or cost-sensitive decisions can be bound to named accountable people.
-
C04 Run and cost visibility
- Available records assign sources, actions, outcomes, failures, and AI usage to a run. Cost is shown in understandable categories.
-
C05 Source and model choice
- Sources and models are selected for task, data requirements, quality, and operating model. Availability and regional options depend on each provider.
-
C06 Replaceable components
- Where interfaces and the selected implementation support it, model, retrieval, or tool components can be replaced. Replaceability is not assumed universally.