Most AI demos show an agent acting. Almost none show how you'd prove what it did, or stop it when it shouldn't. This is that missing layer: one control plane every agent passes through, risk-classified, gated, and written to a tamper-evident ledger. It is what separates a clever demo from something a regulated business will actually deploy.
Give an agent the power to act, whether that means releasing a payment, escalating a case, or committing stock, and the first question every risk officer asks is: how do I know what it did, that it stayed within policy, and that the record hasn't been changed since? Orchestration demos skip straight past this, so the agents that dazzle on stage never reach production. The blocker to enterprise AI is rarely capability. It is nearly always control.
The obvious version is to let the agent decide and write what it did to a log table. It fails the moment a regulator leans on it:
So the gate has to be deterministic rules, giving a decision you can re-derive. The log has to be hash-chained, so any edit is detectable and locatable. And the whole thing has to replay. On top of that, you have to be able to break it on demand to prove it works.
Every action any agent proposes is routed through one plane, whether it comes from the audit bot, the AML monitor, the KYC desk, or the payments flow. It is risk-classified by rules rather than a model, the policy gate decides allow / escalate to a human / block, and the decision is written to an append-only, hash-chained ledger. One honest point: the gate is deterministic if/else logic. That is deliberate, and it is why the decision is reproducible. The AI lives in the agents being governed. The gate is the seatbelt, and a seatbelt shouldn't be clever.
The ledger gives two independent proofs. Each entry's hash covers its contents and the previous hash, which makes it a chain. Integrity means the record wasn't altered. Replay means the decision re-derives from its inputs. They catch different attacks. Replay would catch a flipped decision even if someone re-hashed the whole chain.
Take a verified ledger of 126 actions. An insider quietly flips one gated decision, seq 0140, an AML block, to "allow", hoping it slips through. The moment you re-verify:
| State | Integrity | Replay | What you see |
|---|---|---|---|
| Before | verified | 126/126 | chain intact, every decision re-derives |
| After tampering seq 0140 | BROKEN at 0140 | DRIFT [0140] | the chain breaks at the altered row; replay flags the same row |
The honest trade-off. The gate is rules, not machine learning, and that is the feature rather than a shortcut. A learned policy would be faster to write and impossible to defend to a regulator, whereas deterministic rules are reproducible, explainable, and replayable. There is deliberately no clever model in the decision path. The AI lives in the agents the ledger governs, and the ledger's job is to make their actions provable. (One nuance kept honest: the hash excludes the timestamp, so an unchanged ledger reproduces identical hashes on re-run. Otherwise "reproducible" would be a half-truth.)
The same control plane sits under the Audit Bot, the monitor, the AML and KYC agents, and the operations tower. Governance isn't bolted onto one page. It is the spine the whole portfolio runs on. A sample entry:
seq : 140 agent : AML Monitor action : escalate_aml subject : W00008 amount : S$19,641 tier : high decision : escalate → MLRO policy : POL-AML evidence : [T-…-S01 … S07] prev_hash : 4a91…0c3d hash : 8f22…b6e1
This is the competency I'd most want a hiring manager to see. Anyone can wire up an agent that acts. The rare and valuable skill, the one a regulated organisation needs before it adopts AI, is designing the safeguards that make those agents trustworthy: a deterministic gate you can re-derive, a human checkpoint on the consequential action, and a tamper-evident trail that can itself be proven. I don't treat governance as a slide. I build it as the layer everything else runs on, and I make it falsifiable. Press the button and watch it catch a lie.
The tamper test above isn't a screenshot. It is the live interaction on the home page. Press it and watch integrity break and replay drift, then reset.