Semantic Cluster: Security
Enterprise Agent Permissions
Implement Zero-Trust boundaries for your AI models. Control exactly which data your agents can read and which APIs they can mutate.
Zero-Trust AI Security
Zero-Trust AI Security means never implicitly trusting an LLM's outputs or its requested API calls, instead forcing every action through a deterministic identity and access management (IAM) validation layer.
When you deploy a Procurement Agent, it should technically be incapable of querying the HR database. Stellaris AOS maps enterprise IAM roles directly to individual agent identities, ensuring they inherit strict network and data boundaries.
Frequently asked questions
- What is Zero-Trust AI security?
- It means never implicitly trusting an LLM's output or the API calls it requests. Every action is forced through a deterministic identity and access management validation layer before it runs, so an agent cannot act outside the boundaries it was granted.
- Can an AI agent reach data it should not see?
- No. Agent identities are mapped to your enterprise IAM roles and inherit strict network and data boundaries. A procurement agent is technically incapable of querying the HR database, because the permission simply does not exist for that identity.
- How are permissions assigned to each agent?
- Agents are denied everything by default and then granted narrow scopes for their own sub-domain. Permissions live in the control layer, not in the prompt, so they cannot be talked around by a cleverly written instruction.
- What happens when an agent tries an action outside its scope?
- The action is refused at the control layer and written to the audit log, so you can see what was attempted, by which agent identity and when. Nothing reaches the target system, and the attempt itself becomes evidence for your compliance review.
- Can a human override a blocked action?
- Only an authorised person can, and only explicitly: the request is escalated with its full context and requires an approval token generated by that operator. The override is recorded with the identity of whoever granted it.