Vantio Enterprise · Optional governance add-on · Contact Vantio
Govern the authority Phantom Engine enforces.
Phantom Engine answers what an agent is allowed to do on enrolled infrastructure. Vantio Enterprise governs who owns that authority, who may change it, which actions require approval, how exceptions expire, and what evidence is preserved.
Agent ownership
Delegated authority
Approvals
Dual control
Exceptions
Expiration
Freeze and revoke records
Durable evidence
What has to be true before an agent acts
Consequential work should carry its own paper trail. Every link below answers a question a reviewer will eventually ask.
- 01
Enterprise intent
A person or a standing policy decides what the work is for.
- 02
Identity
The acting agent, process, or host is named rather than assumed.
- 03
Objective-bound capability
Permission is scoped to that objective, expires, and cannot grow when it is delegated.
- 04
Policy decision
Phantom Engine evaluates the action on a supported application path and can allow it, refuse it, redact it, cap it, or send it for approval.
- 05
Controlled execution
Phantom Engine holds the execution envelope on the Linux hosts you enroll.
- 06
Independent verification
A check the acting worker cannot satisfy by simply reporting success.
- 07
Durable evidence
The decision and the outcome are recorded so a reviewer can read them later.
- 08
Revocation or recovery
Authority can be withdrawn, and the system can be brought back to a known state.