Bitligence Agent Control Plane · the governance plane of the platform
The Agent Control Plane.
Every action an agent takes is checked in the path — against its capability, your policy, and live state — then permitted, transformed, denied, or escalated to a human, before it executes.
Separate from build and orchestration, so it governs every agent on any framework — strongest on agents built on the Build layer.
What it does
Eight capabilities. One runtime.
The control plane isn’t a dashboard — it’s eight capabilities the platform operates on every agent action. None are watch-only.
Runtime Enforcement
Every action checked in the path, before it executes — fail-closed. Outsiders observe and alert; inside the loop, the gate prevents.
operated on every action · in the path
Watch vs. assure
Watching an agent isn’t the same as stopping it.
Outside-the-loop tools watch an agent’s API calls and alert you after the action already ran. Bitligence sits inside the loop — so it can stop or fix an action before it runs, then prove it.
Otherstrusts a name or label the agent reports — which is easy to spoof.
Control PlaneIdentity is tied to the agent’s actual running code and checked like a passport.
Othersrules cover only the API calls it sees from outside — not the real action.
Control PlaneRules are written over the real actions an agent can take.
Otherscan block crudely at the network edge, but not the specific action.
Control PlaneStops the exact action at the moment it’s decided.
Otherscan cut the connection — but there’s no clean way to resume.
Control PlanePauses an agent mid-run for a human, then resumes cleanly.
Otherskeeps logs of what happened — but can’t replay them.
Control PlaneKeeps a tamper-proof record you can replay exactly.
Othersflags “this looks different” — can’t tell a real change from normal variation.
Control PlaneCompares behavior to a known-good version, so real drift stands out from noise.
Otherssends spend reports after the bill has arrived.
Control PlaneCounts and caps spend live, as it happens.
Otherscan cut off access — but can’t roll back to a known-good version.
Control PlaneRolls an agent back to a known-good version, or revokes it.
Watching tells you what happened. Being in the loop guarantees what doesn’t. Outside-the-loop tools top out at see it. The Agent Control Plane carries every action all the way to prove it.
How autonomy is earned
Day 1: every agent decision is reviewed. Day 90: only the ones that haven’t earned a rule.
When agreement on a category crosses ≥95% over ≥20 samples, the runtime surfaces the rule with its supporting evidence. Your operator approves it once. That category stops landing in the inbox; the agent runs it under the approved rule, with the attestation chain preserved.
See the gate run live.
Watch real actions hit the control plane in the path, get a verdict in milliseconds, and land in the oversight inbox.
The Control Plane governs. The Build layer builds. Together they’re the platform.