Platform
Knowledge, security and identity
What a team knows leaves with the person; access and identity for agents are granted by hand; the auditor is answered from memory.
Knowledge, security and identity
What you get
Identity, access and knowledge that stay with the seat.
A seat is a role a person and an agent hold together; the escalation matrix says who decides above each limit, seat by seat.
Access as a request
In ClrSlate or through your toolsAccess to a system, for a person or an agent, is a request to its service owner, within the seat's profile, with an end date and a record.
Audit evidence from the record
In ClrSlateWho changed what, who approved it, under which rule: linked across the ticket, the merge and the deploy, assembled into an evidence pack the compliance owner releases.
Documentation and wiki that stay with the seat
In ClrSlate or through your toolsRunbooks, decisions and the documentation of every service, owned by a seat and kept current by its agent, so knowledge does not leave with people.
Identity for people and agents
In ClrSlate or through your toolsAn agent gets an identity the way a person does, from the same practice, under the same policy, with the same record.
Secrets and credentials with an owner
In ClrSlate or through your toolsEvery credential an agent uses has an owner, a scope and an end date, granted through the same request as a person's.
Security findings that become requests with an owner
Through your toolsFindings from the scanners you run arrive as requests on the seat that owns the service; routine ones are fixed inside policy, critical ones reach the security lead the same day.
Sign in through your identity provider
Through your toolsYour people sign in with the identity provider you already run; seats and roles follow from it.
The organization's knowledge graph
In ClrSlateEverything the organization owns, who owns it and how it relates: units, seats, agents, repositories, resources and the decisions about them, in one place every agent can read.
How it looksat work.
Cropped to what matters, at Halden and Corvane, fictional companies.
Access request
Production read access for an agent
Declined · decision record DEC-2214
No production access for the first quarter; review date set
Audit evidence
From the record, not from memory
- Asked
- Does agents’ access follow the access policy?
- Assembled
- Every agent seat, every grant, the one declined request
- Released by
- Yuki Tanaka, compliance lead
At work,job by job.
The jobs that use this part, each with how it runs.
- HaldenSecurity and compliance gates
- HaldenYour procedure, run by the agent
- CorvaneA coding agent joins the team
- HaldenAsk the record who approved it, and why
- CorvaneChange the organization
Told end to end
Halden, Corvane and Kestrel Labs are fictional companies.
The rest of the platform
Start with howyou run today.
Bring one piece of work that breaks at the handoffs: a pull request waiting on three reviewers, an initiative spread across twelve tools, a release nobody owns. We model the seats it crosses, give one of them an agent, and follow one decision to its record.