An agent only does what its passport allows.
Every agent runs under a signed passport issued by your own certificate authority. The passport sets the tools the agent can call, the model tier it can reach, the budget it can spend, and the workspace it runs in. Nothing runs without a passport. A sub-agent can never exceed its parent's authority, and any agent can be revoked in seconds.
How agents are governed.
A signed passport travels with every agent, and enforcement is fail-closed: when a check fails, the agent stops. Certified Agents is an Enterprise capability.
You decide what every agent can do
A per-install Ed25519 CA signs every agent passport. Each passport sets the tools an agent may call, the model tier it can reach, its per-call budget in spend and wall-clock time, its workspace, and when it expires.
An unsigned agent never runs
Preflight refuses any unsigned or over-scoped agent before it acts. Passport enforcement is default-on in the sovereign/regulated SKU, admin-enabled in base.
A sub-agent can't grant itself more power
Every sub-agent is clamped to its parent's authority. Any attempt to exceed it is blocked and audited.
Shut an agent down in ≤30 seconds
Revoke a passport and the agent stops acting across the install within 30 seconds. The revocation ledger is append-only.
A person signs off before high-stakes actions
Require human approval before an agent runs a sensitive action, so nothing irreversible happens on its own.
Agents act on your real systems
Agents reach the same 725 connectors and knowledge as your workflows, under the same passport.
Ten agents, ready to put to work.
Pre-built, Enterprise-Edition agents — each one grounded in your data, gated by human approval where it matters, running on your local model tier. Deploy them as-is or use them as blueprints for your own.
Brand-Consistent Content Drafter
Drafts social posts, email copy, and blog outlines from the Master Context File, with deterministic brand-compliance checks.
Client Onboarding Agent
Sends welcome email, intake form, and scheduling link, builds the first-week checklist, and tracks open onboarding steps for every new client.
Competitor Watch Agent
Tracks competitor websites, social channels, and pricing at scheduled intervals and delivers weekly change reports.
Content Repurposing Engine
Transforms one content piece into a professional post, newsletter, three social posts, and a video script — brand rules enforced on every output.
Client Question Answering Agent
Automatically answers the top recurring customer questions from the approved FAQ, escalating anything it cannot ground.
Invoice Follow-Up Agent
Tracks overdue invoices and sends escalating follow-ups (reminder → firm → final) on the owner-set intervals, logging every touch.
Lead Qualifying & Screening Agent
Qualifies incoming website/email leads: asks the qualifying questions, scores against owner criteria, classifies hot/warm/cold, and reports.
Meeting Prep Agent
Aggregates attendee profile, company updates, and CRM interaction history into a single-page briefing 30 minutes before each call.
Outbound Prospecting Agent
Searches prospects by owner criteria, researches each, drafts personalized outreach, and logs every interaction to the CRM with a full audit trail.
Weekly Report Builder
Compiles analytics, CRM, and ad-account data into a Friday summary with highlights and deterministic red flags.
Put governed agents to work.
See certified agents run on your own data, governed by signed passports and human gates, with revocation that takes effect in seconds.