The operating loop

A single loop for every
high-stakes machine decision.

AgentSigna is organized around the full lifecycle of a sensitive action, from the moment an agent requests authority to the moment the outcome updates trust. Seven steps, closed-loop.

Agent requests authority

Before touching any business system, your agent submits an action request: who it is, what it wants to do, and against which counterparty. The request carries enough context for a real authorization decision to be made. No authority granted, no execution proceeds.

The request never reaches the business system until a verdict is issued.

Policy engine evaluates in real time

AgentSigna resolves your organization's active policy against the request. It weighs the agent's trust standing, the counterparty's risk classification, the nature of the action, and any approval thresholds your team has defined. A verdict returns in under 500ms.

Three possible outcomes: authorized, escalated for human review, or rejected.

Escalation routes to human approvers

When the policy requires human judgment, the case enters a structured review queue with full context attached. The approver sees exactly what triggered escalation and why, not a bare notification. Decisions are made with evidence, and the decision itself is permanently recorded.

Escalation preserves context. Approvers never decide blind.

Passport is cryptographically signed

Authorized actions receive a signed Passport before they execute. It carries the full decision record (actor, action, counterparty, policy applied, approval chain) and is sealed with a cryptographic signature linked to every prior event in the case. It cannot be altered after issuance.

The proof travels with the action. No call back to the platform required to verify it.

Agent executes with the Passport

The agent carries the Passport to the target business system as proof of authority. Execution is time-bounded. A Passport that has expired cannot be reused. Any downstream system can verify the signature independently.

No open-ended authorization. Every grant has an expiry.

Outcome closes the ledger entry

When the action completes, or is reversed, rejected, or disputed, the outcome is recorded against the original case. The ledger entry closes with a cryptographically linked event. Whatever happened is durably attached to the record of what was authorized.

Completion, reversal, dispute, or rejection: all create the same quality of record.

Trust updates from what actually happened

Real outcomes feed back into agent and counterparty trust standings. Agents with consistently good results earn more operating latitude over time. Agents involved in adverse outcomes lose it. The next authorization decision has better signal than the last.

Trust is earned by behavior, not granted by assumption.

Why this matters

One loop. Every action.
No gaps in the record.

Every decision, approval, execution, and outcome passes through the same seven-step loop. Nothing is handled outside of it. The ledger is always complete.

No side-channel execution

Agents can only act with a valid Passport

If AgentSigna hasn't issued authority, the agent has no basis to proceed. The check is enforced at the API boundary.

No missing context in approvals

Approvers see everything that mattered

Trust score, counterparty status, action type, amount, and the exact rule that triggered escalation: all visible before the decision.

No unlinkable audit events

Every event is part of one chain

Request, decision, approval, execution, outcome: each event references the previous digest. The record cannot be surgically edited.

Design principle

Approval, proof, and replay should not be separate products when the same action created the risk. AgentSigna closes the loop in one place.

See the loop live

Watch it run on a real scenario.

We'll walk through all seven steps using a live procurement workflow with actual agents and policies.