Skip to content
AI Patterns
TRUST · SECURITY · ASSURANCE

Trust the path because every hop keeps its proof.

AI Patterns treats identity, authorization, architecture state and evidence as one assurance boundary. Provider-verified decisions stay distinct from inference, and change can invalidate stale proof.

AI Patterns
AnalyzeControl TwinEvidence
CURRENT
AnalyzeControl TwinEvidencePatterns
PRODUCT VIEWEvidence chain
ObligationCPS 230material service↓
PatternHuman approval gatewayimplemented↓
ProofApproval eventverified↓
AuthProvider decisioneffective allow↓
StateArchitecture fingerprintbound
OPERATING PRINCIPLES

Trust is implemented in product behaviour.

These controls affect whether architecture assurance can be relied on. They are not brochure claims; they define how authorization, evidence and change are represented.

01IdentityOrganisation-scoped access

Workspace access remains inside the configured identity boundary.

02AuthorizationProvider evidence preserved

Verified decisions remain distinguishable from high-confidence and inferred authority.

03SecretsServer-side credentials

Integration and service credentials are never treated as browser state.

04EvidenceProvenance attached

Control evidence retains owner, verification state and architecture fingerprint.

05ChangeStale proof invalidated

Permission, federation and architecture drift can force revalidation.

06FrameworksTraceability, not certification

Regulatory mappings do not imply regulator endorsement or certification.

AI Patterns
AnalyzeControl TwinEvidence
VERIFIED
AnalyzeControl TwinEvidencePatterns
PRODUCT VIEWEffective authority path
EntryCustomer-service agentmodel-influenced runtime↓
IdentityK8s service accountworkload identity↓
FederationAWS roleIRSA trust verified↓
Authoritys3:PutObjecteffective allow↓
TargetClaims evidence bucketproduction write
AUTHORIZATION CONFIDENCE

Verified is reserved for provider-backed decisions.

Raw policy, role or binding data can identify a candidate path, but AI Patterns only marks an authorization edge verified when the provider or API server has confirmed the decision. Unknown conditions remain unknown instead of being promoted into certainty.

Verified provider decision or SubjectAccessReviewHigh confidence explicit policy/assignment evidenceInferred architecture relationship requiring validation
CHAIN OF CUSTODY

Evidence stays tied to the architecture state it proves.

Provider authorization output, control tests and architecture fingerprints are retained as related proof. When effective authority or a federation path changes, the relevant assurance state can be marked stale and returned to review.

See evidence workflow →
AI Patterns
AnalyzeControl TwinEvidence
ASSURANCE LIVE
AnalyzeControl TwinEvidencePatterns
PRODUCT VIEWControl Twin
SystemClaims decision agentproduction↓
Exposure2 material paths1 verified↓
ControlHuman approval gatewayenforced↓
EvidenceApproval + IAM proofcurrent↓
ChangeRole policy changedrevalidation required
SECURITY REVIEW

Bring the boundary that matters.

Security, procurement and governance teams can start with the exact identity, data handling, authorization or assurance concern they need to validate.

No procurement maze. Four fields to start.