Identity
Know which user, service or agent initiates work and preserve that identity across tool boundaries.
Authority should be designed, limited and reviewable.
A company should understand what software can see, what an agent can change, which external services receive data and who remains responsible for the outcome.
Do not confuse a design intention with verified control.
Security, privacy and compliance depend on the deployed system, data, providers, contracts and operating process. We distinguish reusable engineering principles from project-specific evidence.
Codemind will not claim a certification, encryption design, audit capability, rollback guarantee or regulatory status that has not been established for the actual product and environment.
Trust comes from inspectable architecture, operating evidence and clear responsibility—not badges placed on a marketing page.
Controls across the whole system.
The required depth changes with the action, consequence, reversibility and information involved.
Least privilege
Expose only the records and operations required for the current task and approved role.
Human approval
Pause sensitive, high-impact or unusual actions with enough evidence for a person to decide.
Auditability
Record material requests, decisions, approvals, tool results and resulting business events with appropriate retention.
Evaluation
Test context, retrieval, reasoning, policy and end-to-end task outcomes rather than relying on a convincing demonstration.
Observability
Make dependency failure, retries, latency, cost and degraded quality visible to an accountable operator.
Reversibility
Use idempotency, rollback or compensating actions and understand which external effects cannot be undone.
Data boundaries
Define what data may enter a model or third-party service, why it is needed and how long it is retained.
Keep responsibility outside the model.
Model inference can propose work. Application identity, authorization, policy and domain services decide what may happen.
- R1User or service identityThe task and the scope it is permittedApplication
- R2Application state and contextAssembled under that identityApplication
- R3Structured proposalBounded inference returns a proposal, not a commandModel
- R4Policy and approvalRules and, where required, a personDecides
- R5Tool or domain serviceRuns the authorised commandApplication
- R6Audit event and outcomeRecorded and observableApplication
DrawingCM-005
TitleWhere responsibility sits
StatusReference pattern
DashedThe model proposes
BoxedPolicy or a person decides
RevisionRev A · 5 Oct 2026
Checked againstHow agents work in business software
A deliberately limited first demonstration.
The public site uses a smaller data and authority surface while the agent, privacy and tool architecture develops.
- The explanation-depth preference and selected problem categories are stored only in the visitor’s browser.
- The typed problem statement is analysed locally and is not written to browser storage.
- The current website guide has no CRM, calendar, payment or other action tools.
- The contact form sends the submitted details to Codemind’s email provider and does not use the previous website database.
- Contact delivery and shared rate limiting must be configured before the production readiness check passes.
- Legal, pricing, navigation, metadata and core service content remain approved deterministic content.
What we define before a system goes live.
The exact evidence depends on the risk and scope, but production responsibility should not be left implicit.
Data map
Sources, purposes, processors, storage, retention and deletion responsibilities.
Access model
Identities, roles, resource scope, service credentials and privileged operations.
Evaluation record
Representative tasks, expected evidence, policy tests, failure categories and acceptance thresholds.
Release evidence
Build, dependency, test, migration, accessibility, performance and smoke-test results.
Operating model
Health, monitoring, alert ownership, support, incident response and dependency degradation.
Recovery
Backup, restore, rollback, compensating actions and the limits of reversibility.
A UK-registered contracting entity.
Codemind Ltd is registered in England and Wales under company number 15985479.
Company registration establishes legal identity. It is not a substitute for project-specific security, privacy, insurance, service-level or compliance evidence. Those requirements should be made explicit in the engagement.
View the Companies House recordPut the risk and responsibility on the table early.
Tell us about the data, action, users and constraints involved. We will help define the controls and evidence the system needs before authority expands.