↓ Skip to main content
tomrochette.com
  1. Agents/

Control planes

Author
Tom Rochette
History / Edit / PDF / EPUB / MD
Created: / Updated: / Status: in progress / Readability: 3 / 3 minutes read (~582 words)
agents 48 control-planes 12
Table of Contents

Governance above the harness: policy, permissions, approvals, budgets, trust, settlement, and audit between agent intent and execution.

  • Agent Control - Galileo’s Apache-2.0 control plane that turns any Python or TypeScript function into a governed decision point with a @control() decorator and remotely managed policy.
  • AgentField - the Apache-2.0 agent-backend control plane that turns Python, Go, and TypeScript functions into governed REST endpoints, with DID identity, tag policy, approvals, cost caps, and offline-verifiable receipts in the free build.
  • CC Safety Net - the MIT pre-execution guard that parses commands across sixteen coding-agent CLIs and blocks destructive git and filesystem operations plus secret reads before they run.
  • Code Atelier Governance SDK - the MIT Python SDK that puts scope, budget, approval, and loop gates in front of LLM calls and writes an HMAC audit chain to your existing Postgres.
  • Cordum - the BUSL-1.1 source-available control plane whose Go safety kernel returns ALLOW, DENY, or REQUIRE_APPROVAL before a worker runs, with a Claude Code hook firewall on the endpoint.
  • CrowdStrike Falcon Guardian - the commercial AIDR layer that discovers shadow AI agents and turns AI usage policy into endpoint-enforced controls at agent execution time.
  • Databricks Unity Gateway - the managed governance gateway inside Unity Catalog that routes every model and MCP request through permissions, guardrails, rate limits, and dollar-cost audit tables.
  • HOL Guard - the Apache-2.0 consortium-built runtime guard whose published per-harness coverage contract names what it can and cannot see, with approvals, local receipts, supply-chain inspection, and a freemium cloud.
  • IBM ContextForge - the Apache-2.0 gateway that federates MCP, A2A, and REST/gRPC traffic behind one authenticated, rate-limited, audited endpoint, with RBAC, teams, SSO, and plugin guardrails.
  • Jamf AI Governance - the Mac-native capability that turns AI usage policy into enforced vendor configurations for Claude Code, Codex, and their neighbors through Apple device management.
  • Microsoft Agent Governance Toolkit - the MIT multi-language toolkit for deterministic policy, identity, sandboxing, SRE, and compliance, with a critical authentication writeup to read first.
  • Okto Pulse - the Elastic-2.0 local-first SDLC workbench that blocks coding-agent status transitions until spec coverage and delivery evidence are met.
  • OpenAPPA - the MIT Rust engine that labels everything an agent reads with an audience and trust level and checks every tool call against TOML information-flow policy before it runs.
  • Paperclip - the MIT self-hosted control plane for a company of agents, heartbeats, budgets, and governance, past 100k stars in seven months.
  • SettleBridge - the trust and policy gateway for agent-to-agent settlement, with escrow, reputation, and Merkle audit trails, and unresolved license metadata.
  • SIDJUA - the governance-first orchestrator with a five-stage pre-action pipeline, frozen since April 2026 with its announced reopening date missed.
  • TinyAGI - the one-person-company orchestrator that stalled in March 2026, kept as the category’s first consolidation record.
  • Veto - the Apache-2.0 authorization kernel that holds or blocks risky agent tool calls before execution and records offline-verifiable receipts.

Its members are compared on shared rows in the Control Planes Feature Matrix.

Changes
#

  • 2026-08-27 - Added Paperclip.
  • 2026-08-27 - Added TinyAGI.
  • 2026-09-27 - Added Code Atelier Governance SDK.
  • 2026-09-27 - Added Microsoft Agent Governance Toolkit.
  • 2026-09-27 - Added Okto Pulse.
  • 2026-09-27 - Added SettleBridge.
  • 2026-09-27 - Added SIDJUA.
  • 2026-09-27 - Added Veto.
  • 2026-10-02 - Added Databricks Unity Gateway.
  • 2026-10-04 - Added CrowdStrike Falcon Guardian.
  • 2026-10-05 - Added Agent Control.
  • 2026-10-05 - Added Jamf AI Governance.
  • 2026-10-07 - Added Cordum.
  • 2026-10-07 - Added OpenAPPA.
  • 2026-10-07 - Added CC Safety Net.
  • 2026-10-09 - Added HOL Guard.
  • 2026-10-11 - Added IBM ContextForge.
  • 2026-10-13 - Added AgentField.