Resources
How to govern an autonomous agent.
Evergreen explainers on oversight law, approval gates, data residency, secrets handling, MCP, and agent memory — written to be useful whether or not you ever sign up.
Guide · Compliance
EU AI Act Article 14
What the EU AI Act’s human-oversight requirement means for AI agents — oversight as an external control, not a prompt instruction — and how to architect for it.
Learn moreGuide · Security
Approval gates
Why “always ask first” in a system prompt is not a control — and what a real approval gate looks like: default-deny policy, a proposal lifecycle, fail-closed unknown tools, and audit chains.
Learn moreGuide · Residency
Swiss data residency
What Swiss data residency really means for AI agents — FADP basics, the storage-versus-processing distinction vendors blur, CLOUD Act exposure, and the questions to ask any provider.
Learn moreGuide · Security
Secrets management
Why an AI agent must never see your credentials, how prompt injection turns context into an exfiltration channel, and the write-only vault pattern that fixes the class.
Learn moreGuide · Concepts
What is MCP?
The Model Context Protocol — the open standard connecting tools and data to AI agents, and the layer where governance either happens or doesn’t.
Learn moreGuide · Concepts
Long-term memory
Why persistent memory turns an assistant into an operator — and why it must be tenant-owned, inspectable, and stored somewhere you can name.
Learn more