Skip to content

Vantio Enterprise · Optional governance add-on · Contact Vantio

Govern the authority Phantom Engine enforces.

Phantom Engine answers what an agent is allowed to do on enrolled infrastructure. Vantio Enterprise governs who owns that authority, who may change it, which actions require approval, how exceptions expire, and what evidence is preserved.

  • Agent ownership

  • Delegated authority

  • Approvals

  • Dual control

  • Exceptions

  • Expiration

  • Freeze and revoke records

  • Durable evidence

What has to be true before an agent acts

Consequential work should carry its own paper trail. Every link below answers a question a reviewer will eventually ask.

  1. 01

    Enterprise intent

    A person or a standing policy decides what the work is for.

  2. 02

    Identity

    The acting agent, process, or host is named rather than assumed.

  3. 03

    Objective-bound capability

    Permission is scoped to that objective, expires, and cannot grow when it is delegated.

  4. 04

    Policy decision

    Phantom Engine evaluates the action on a supported application path and can allow it, refuse it, redact it, cap it, or send it for approval.

  5. 05

    Controlled execution

    Phantom Engine holds the execution envelope on the Linux hosts you enroll.

  6. 06

    Independent verification

    A check the acting worker cannot satisfy by simply reporting success.

  7. 07

    Durable evidence

    The decision and the outcome are recorded so a reviewer can read them later.

  8. 08

    Revocation or recovery

    Authority can be withdrawn, and the system can be brought back to a known state.