Skip to main content

Platform

Knowledge, security and identity

What a team knows leaves with the person; access and identity for agents are granted by hand; the auditor is answered from memory.

What you get

Identity, access and knowledge that stay with the seat.

A seat is a role a person and an agent hold together; the escalation matrix says who decides above each limit, seat by seat.

  • Access as a request

    In ClrSlate or through your tools

    Access to a system, for a person or an agent, is a request to its service owner, within the seat's profile, with an end date and a record.

  • Audit evidence from the record

    In ClrSlate

    Who changed what, who approved it, under which rule: linked across the ticket, the merge and the deploy, assembled into an evidence pack the compliance owner releases.

  • Documentation and wiki that stay with the seat

    In ClrSlate or through your tools

    Runbooks, decisions and the documentation of every service, owned by a seat and kept current by its agent, so knowledge does not leave with people.

  • Identity for people and agents

    In ClrSlate or through your tools

    An agent gets an identity the way a person does, from the same practice, under the same policy, with the same record.

  • Secrets and credentials with an owner

    In ClrSlate or through your tools

    Every credential an agent uses has an owner, a scope and an end date, granted through the same request as a person's.

  • Security findings that become requests with an owner

    Through your tools

    Findings from the scanners you run arrive as requests on the seat that owns the service; routine ones are fixed inside policy, critical ones reach the security lead the same day.

  • Sign in through your identity provider

    Through your tools

    Your people sign in with the identity provider you already run; seats and roles follow from it.

  • The organization's knowledge graph

    In ClrSlate

    Everything the organization owns, who owns it and how it relates: units, seats, agents, repositories, resources and the decisions about them, in one place every agent can read.

How it looksat work.

Cropped to what matters, at Halden and Corvane, fictional companies.

Access request

Production read access for an agent

rulesSEC-R03: production access for agents needs the CISO

Declined · decision record DEC-2214

No production access for the first quarter; review date set

Access for an agent is a request, decided by the person who holds it.

Audit evidence

From the record, not from memory

Asked
Does agents’ access follow the access policy?
Assembled
Every agent seat, every grant, the one declined request
Released by
Yuki Tanaka, compliance lead
The audit pack is a query on the record, reviewed before it leaves.

Start with howyou run today.

Bring one piece of work that breaks at the handoffs: a pull request waiting on three reviewers, an initiative spread across twelve tools, a release nobody owns. We model the seats it crosses, give one of them an agent, and follow one decision to its record.