Conversation
Investor experience · text & voice
AGS Sovereign / SSRN
Authorization path · evidence & reasoning
This reference uses the same logical sequence, not a real remote SSRN connection.
PEE is authoritative. A DENY short-circuits the guards. Guards may restrict a PERMIT, but never turn a DENY into a PERMIT.
Architecture & policy
Edit architecture and test the controls
Select a component to rename it or edit its responsibilities. The diagram changes immediately. This designs the integration; it does not reconfigure a live bank.
Agents hold no brokerage credentials. All side-effect tools must pass through the PEP, obtain a binding SSRN decision, and execute only on PERMIT. The protected adapter must reject direct agent access.
This is the demo’s active reference policy. Save changes to affect the next synthetic authorization; it is not an SSRN policy-pack import.
The public site runs a reference evaluator. It has no access to the Python SSRN control plane.
POST /evaluateInvokes the genuine AGSStack eight-layer engine. Python SDK uses an X-AGS-KEY header.
POST /runtime/runs → POST /runtime/decideExecutes the PEE and the nine runtime guards in one decision call. Requires provisioned use case, capability, run and tenant policy.
GET /runs/{run_id}/traceReturns persisted PEE verdict, guard outcomes, approval events and action traces. A PERMIT requires both planes.
No Python SSRN service is running in the connected Render workspace. We do not label local JavaScript reference decisions as real SSRN decisions.
Open SSRN source branch ↗Open composition contract ↗