Entities

Agent Access Finding

The logged record of a single Agent Policy evaluation — which policy fired, what action it was evaluated against, and what it resolved to.

Volume

One per governed tool call an agent attempts

Retention

Indefinite, append-only, tamper-evident (CON-109)

Entity attributes5
  • agent_access_finding_id
  • agent_action_id
  • agent_policy_id
  • outcome
  • evaluated_at
Entity relationships2
Entity lifecycle

Not yet researched

Only the control-bearing entities were modelled for lifecycle. Defensible as a starting point, but it does leave the entity model uneven, and this is incompleteness rather than a finding.