Define the boundary.
Map the workflow, its model and tool calls, and the actions the controller could mediate. Identify existing provider accounts and the owner of each policy.
Choose where AI work may run, what it may spend, and what needs approval. Bring those decisions into the workflow at the points where the next action can still change.
See it in the demo ↗A workflow can change after it starts. The proposed controller evaluates the next protected action against the policy active at that point.
Evaluate the chosen model, worker, permissions, and budget before dispatching the workload.
{
"checkpoint": "dispatch",
"policy_version": "v12",
"worker": "approved-local",
"decision": "allow"
}Illustrative record format · not a published APIDefine which steps may use local workers, approved cloud services, or either. Evaluate how routing responds when those conditions change.
Explore the workloads ↗Connect a result to the policy version, worker, and enactment decisions behind it. Keep estimated spend separate from reported usage, including attempts that need reconciliation.
Dispatch allowed under version v12.
Cancellation support recorded.
Version v13 restricts external processing.
Result release requires review. Prior transfer remains recorded.
Start with one workflow and up to two enactment endpoints. Agree on the boundaries, the policy changes, and the evidence that would support a next step.
Map the workflow, its model and tool calls, and the actions the controller could mediate. Identify existing provider accounts and the owner of each policy.
Implement the agreed checks at supported enactment points. Record policy versions, attempt status, and the cancellation behavior each endpoint actually exposes.
Introduce policy changes during controlled runs. Inspect decisions, added latency, cost estimates and reported usage, including outcomes that remain unresolved.
Confirm its permission model, usage reporting, cancellation support, and completion signal. These determine the pilot’s control boundary and how uncertain outcomes are represented.
A policy change can block the next action numericspace controls. Stopping work already running depends on the worker or provider’s cancellation support.
A cancellation request is not confirmation that enactment has stopped. Work may finish, create side effects, or incur charges. A policy change cannot undo an external action that has already completed. Withholding a result controls release through numericspace; it does not erase data already sent.
A proposed $7,500 pilot, with scope and acceptance criteria agreed before kickoff.