10.0 Agent
Four tools read. Eight ask first.
The agent sits on every page of the platform. It works on the two things it can reach (vendors and digital assets) and nothing it changes lands without you confirming it.
Looked up vendors
Three of your twelve, and one is overdue:
Contoso Payments, due today
Acme Cloud, due in 3d
Northwind Logistics, scheduled
Read the documentation
Vendors → Add vendor. Name and type are the only required fields; criticality, owner and contacts can follow later.
Or tell me the name and I will create it for you.
10.1
The gate is in the server
Every write is held behind an approval the model cannot skip. The prompt asks it to confirm; the API is what refuses. Leave the card unanswered and the change is recorded as declined.
10.2
It looks things up
Counts, names and statuses come from a tool call against your organization's data, never from memory. When a lookup returns nothing it says so instead of filling the gap.
10.3
Honest about its reach
It cannot see evidence files, documents or compliance results, and it tells you that rather than guessing. What it cannot do is as clear as what it can.
Provable today, not at audit time.
Run it yourself or have Bindsec run it for you. Either way, the evidence is current and the posture is one place.