Security & Trust

Security controls for governed AI agent execution.

Sentinel SCA is built to help teams verify agent identity, evaluate actions before execution, preserve tenant-scoped evidence, and review operational activity with traceable governance records.

Read Buyer Brief Validation Summary Developer Docs

At A Glance

AreaCurrent Implementation
Cryptographic identityEd25519 agent keys with generated keypair and customer-provided public key enrollment.
Signed governanceSigned agent requests are verified before Sentinel records a governance decision.
Governance signing authorityLive responses, decision records, and capability evidence use one Ed25519 authority and key ID. AWS KMS Ed25519 custody support is implemented and deployment-ready; each tenant claim depends on that deployment being configured and smoke-verified.
Tenant isolationUsers, agents, audit events, evidence exports, and billing state are scoped by organization.
Replay-aware controlsTimestamp and signature checks reduce stale or duplicated request risk.
Audit integrityGovernance decisions include hashes, timestamps, and exportable evidence context.
Billing securityPaddle webhook signatures are enforced before subscription lifecycle changes are processed.
Readiness/health, /live, and /ready support deployment and monitoring checks.
No Identity, No Action

Agents must be known and cryptographically verifiable before governed actions are accepted.

Tenant-Scoped Evidence

Customer audit timelines and evidence ZIP exports stay bound to the authenticated organization.

Role-Based Access

Owner, admin, auditor, and viewer roles separate management access from evidence-only access.

Billing Integrity

Unsigned or invalid Paddle webhooks are rejected before entitlement state can change.

Operational Controls

Global protocol freeze, readiness checks, and request IDs support incident response.

Enterprise Review

Architecture, API docs, tenant isolation tests, SLA draft, and DR docs are available for review.

Root of Trust

Sentinel treats its governance signing key as a critical production asset. The runtime fails closed when the configured signing provider is missing, malformed, unsupported, or not valid for the active environment.

One Signing Authority

Live responses, integrity records, and capability evidence resolve to the same public key and key ID.

Default Custody

Runtime secret injection remains available as a migration path, but production use is refused unless an explicit temporary override is documented.

KMS Custody

AWS KMS Ed25519 signing is implemented behind the provider boundary so private key material stays outside the Sentinel process once configured.

Immutable Evidence

S3 Object Lock evidence storage support is implemented and enabled per customer deployment with bucket, retention, legal hold, and IAM verification.

Public metadata: response verification key and signing posture.

Sentinel claims non-exportable KMS custody only for deployments configured with SENTINEL_RESPONSE_SIGNING_PROVIDER=aws_kms, a real AWS KMS Ed25519 key, correct IAM, published key metadata, and passing environment smoke evidence.

Enterprise Security Review Package

Current Status

ItemStatus
Protocol runtimeOperational
Tenant isolation smoke coverageImplemented
Paddle webhook signature enforcementImplemented
Customer BYOK agent enrollmentImplemented
Unified governance signing authorityImplemented
AWS KMS signing custodyImplemented and deployment-ready; enabled per environment after key, IAM, and smoke verification.
S3 Object Lock evidence storageImplemented and deployment-ready; enabled per customer bucket and retention configuration.
Dedicated CloudHSM / FIPS Level 3 custodyContract-scoped; not self-serve.
Third-party security auditPlanned for Enterprise readiness
SOC 2 / ISO 27001Roadmap item, not yet certified

Security Contact

For security review, enterprise evaluation, or responsible disclosure, contact Sentinel SCA through the contact flow.

Contact Sentinel SCA Watch Guided Demo