Northstar Insurance · Agent Operations Center

1 Audit & Attribution

Prove who authorized every agent action and through which delegation chain.

Unprotected

2 Just-in-Time Agent Access

Replace static, long-lived tokens with task-scoped, ephemeral credentials.

Unprotected

3 Least-Privilege Delegation

Scope must narrow at each agent-to-agent hop, not cascade fully.

Unprotected

4 Runtime Enforcement

Block or revoke agent tool calls mid-task. WAF for agent activity.

Unprotected

Workflow: home insurance policy retrieval · May 12, 2026

Live replay

Real-time risk & compliance posture

Files accessed

of 847 in Sarah's book

Blocks fired

No policy enforcement

Credential TTL

365d

Static, full Drive scope

Attribution

None

No delegation chain

SOC 2 CC6.1 · Logical access

FAIL

EU AI Act Article 14 · Human oversight

FAIL

ISO 27001 A.9 · Access control

FAIL

⏱ EU AI Act enforcement

82 days

Until August 2, 2026. Article 14 requires every AI-driven action be authorized at the time it occurred. Penalty: €35M or 7% global revenue.

⚠ Incident #INC-2847 Runtime Policy Violation