Nearly all of these can be watched proving themselves on the narrated guided tour at veridect.ai/governance-suite — about five minutes, live calls to the production engine. The four beyond-human-oversight analytics at the end run on the engine’s API by design, not as tour stations.
01
One model grading its own work
The gap. Most systems still trust a single model’s answer — or let the same model check itself.
Veridect verifies what AI says before governing what it does. Multiple independent frontier models — swappable by design, so no vendor lock-in — are adversarial by construction: they check each other’s work rather than their own. Weighted voting produces a calibrated confidence with source attribution: where the answer could fail (reasoning gaps, hallucination risk, domain mismatch, stale knowledge), not just how much to trust it. The result scores 85.0% on MMLU-Pro, 3.0 points above the best single model inside it.
Cost tracks risk by design: routine calls run lean; the full multi-model adversarial pass is reserved for high-impact decisions, where it earns its cost.
02
Pre-action, not post-action
The gap. Most tools review what AI said after the fact.
Veridect intercepts the proposed action itself — the verb, the target, and the parameters — before it executes. The gate enforces each agent’s explicit authority plus four deterministic policy classes: money over a limit, protected personal data, protected-class adjacency, and regulated health data. Sensitive actions escalate to a human; an action reaching past its declared authority is blocked outright.
03
The consensus trap (correlated error)
The gap. Models agreeing isn’t the same as models being right — they can share the same blind spot.
Veridect computes a deterministic independence read on every consensus: model-family diversity, reasoning divergence, and corroboration depth. High agreement with low independence is flagged and escalated to a human.
The independence signal is a reason to look closer, never proof the answer is wrong — and it never alters the confidence number.
04
Slow-burn data theft across a session
The gap. No single step looks dangerous; the theft hides in ordinary steps.
The gate tracks which kinds of sensitive fields an agent has touched across a session — never the values themselves — and escalates the outbound step when cumulative exposure crosses a threshold.
05
Workflows that break rules no single agent breaks
The gap. One agent reads identity data, another reads health data, a third sends a report — each inside its own scope, while the combined workflow assembles something no one authorized.
Constellation governs the whole fleet: it sees the pattern across agents and escalates the moment combined exposure crosses a line, with each agent’s contribution attributed.
Escalate-only by design: Constellation never auto-approves and never blocks on its own.
06
Proof anyone can check — without trusting us
The gap. An audit trail you have to take on faith is not evidence.
Every verdict produces a SHA-256-chained, write-once audit bundle, signed with an Ed25519 proof-of-origin signature. Veridect Proof is a standalone verifier your risk team downloads and runs offline: it re-checks the hash chain, the signature, and re-derives the deterministic verdict byte-for-byte — no call to our servers. Subpoena-defensible, underwriting-grade evidence.
A whole multi-agent workflow can be sealed the same way: every gate-observed decision in the chain bound into one signed Merkle root, so an entire agent-to-agent-to-tool cascade verifies in a single check by the same offline verifier — and re-checks against the live ledger will distinguish a later legitimate append from tampering.
A seal proves the recorded hops are intact and in the order recorded. It does not prove completeness — an action that never passed through the gate cannot appear in the seal.
07
Who, cryptographically, is asking?
The gap. Agent names in a request can be typed by anyone.
Veridect issues Ed25519 agent passports: signed, replay-proof identity envelopes and signed delegation chains that can only narrow authority hop by hop. In required mode, an unidentified or forged caller is refused before any model is even consulted — zero inference spent on impostors.
08
Oversight that is more than a checkbox
The gap. An escalation only counts if the human actually looked.
Veridect measures review quality at the team level — dissent-blind approvals, rubber-stamp patterns, unusually fast reviews — and reports a risk band.
Aggregate-only: no individual is ever scored, and no band is reported below five reviews. It detects; it never prevents.
09
Tool calls governed at the source
The gap. Agents increasingly act through tool protocols, where enforcement sits beside the traffic instead of inside it.
Veridect’s governed MCP gateway identity-checks and gate-checks every tool call before forwarding it. A refused call is never delivered to the tool — the refusal is returned to the caller and recorded on the ledger. Enforcement lives in the traffic itself.
10
Evidence in the regulator’s language
The gap. “Show us how this is governed” rarely maps to what a system actually logs.
Veridect assembles sealed ledger records into an article-mapped EU AI Act evidence pack — including a serious-incident report skeleton where eligible — and says in writing where the layer does not reach. And the package doesn’t stop at a download: it has been demonstrated landing in a live ServiceNow instance as a standard incident record, through the core Table API every deployment ships with — no GRC module required.
Documentation support for counsel; not a compliance or legal determination.
11
Facts an underwriter can use
The gap. Affirmative AI-agent coverage is young, and underwriters lack structured evidence of how an agent was governed before an incident.
With Veridect Assurance, every governed action becomes a structured, underwriting-grade evidence record, plus 30–90-day portfolio telemetry: decision mix, policy-class fires, ledger integrity, oversight and identity enforcement — counts and rates, deliberately not a composite “AI risk score,” because an invented number helps no one.
Veridect is not an insurer; assurance records and telemetry are not pricing, certification, or coverage.
12
A system that attacks its own defenses first
The gap. Most systems wait to be attacked before they learn anything.
On demand, the engine’s models take turns authoring fresh attack scenarios against a tenant’s own policy — scope violations, authority ambiguity, financial thresholds, protected data, stealth attacks — and the deterministic core judges them in isolation. Contained probes are reported by attack class; anything uncontained is flagged for human review. Nothing auto-tightens.
13
Test tomorrow’s policy against yesterday’s decisions
The gap. Policy changes ship blind, and nobody knows which past calls would have gone the other way.
Replay a proposed change against your own recorded history: which real verdicts flip, and what drives each flip — a single field where one is responsible, a combination where several act together. Zero model calls, zero writes: pure re-derivation of sealed records. Where a record can’t be honestly re-derived, the system refuses to pretend.
And once a change ships, it is on the record. The enforcement configuration the gate actually consults — thresholds, detector set, identity mode, signing state — is attested into its own signed, append-only ledger, with each change mechanically classified as a tightening or a loosening. Decisions carry the fingerprint of the configuration in force when they were made, so “what was the system set to when it cleared this?” has an answer that cannot be quietly rewritten afterwards.
This is self-attestation: the system that enforces policy is the system that records it. It makes a retroactive change to the configuration history evident — it is not independent third-party oversight.
14
The minority report, on the record
The gap. When one model saw what three missed, that dissent usually disappears into an average.
The break from the pack becomes permanent: the dissent ledger records provider stances, lone-dissent patterns, and how the human ultimately ruled — vindicated, partially vindicated, or overruled.
Counts and patterns only: it never ranks providers, and dissent reasoning stays sealed in the audit bundle.