Agentic Workflows · the umbrella
Governed AI coworkers, one spine, different domains.
Agentic Workflows is the BMI2 pillar under which we ship Fiduciary (governed AI for capital-investment underwriting) and A&R (governed AI for music-industry artist development). Same four-boundary spine — Identity, Evidence, Action, Audit — applied to different regulated workflows. Suggests-only. Human signs every consequential step.
The shared spine
Four boundaries every Agentic Workflow passes through.
Each boundary has an owner other than the LLM. If the workflow cannot answer honestly at any of them, it raises an exception a human queue can act on — it never produces a confident guess.
01 · Identity
Keycloak OIDC · per-workflow role.
Every session runs as the requesting person, through a workflow-specific role issued at run time. Postgres RLS enforces it at the row level. The LLM never sees a broad credential.
02 · Evidence
Retrieval → PII gate → quality gate → citation.
pgvector store partitioned by tenant + workflow. Presidio redacts unauthorised entities. A RAGAS + Qwen judge gate blocks answers that can't cite. Every claim carries the document hash + offset it came from.
03 · Action
Temporal workflow · countersignature.
The AI proposes; it never acts. Proposals are packaged into approval envelopes bound to the exact evidence hashes. Only a signed envelope can move to execution. Re-planning invalidates the old signature.
04 · Audit
Hash-chained append-only journal.
Every retrieval, proposal, countersignature and execution lands in a tamper-evident journal. Mid-stream edits invalidate the tail. The audit is what an examiner reads, not what the model says.
Two verticals today, more later
Same spine, different artifacts.
Fiduciary · private preview
Capital-investment underwriting.
Loan tapes, credit memos, contracts, covenants, closing binders. Personas: Underwriting Analyst, Due Diligence Analyst, Portfolio Manager, Data Ops Analyst. Ships against a synthetic capital-investment lab today; pilot data gated by an operator decision on file.
A&R · planning
Music-industry artist development.
Artist profiles, vendor sessions, invoices, splits, PRO registrations, release-clearance documents. Personas: A&R Scout, Development Ops Auditor, Career Development Strategist, Rights & Clearance Compliance. Design-partner stage.
What "governed" means in practice
Every persona is trained through a graded L1 → L7 curriculum against real artifacts of its domain. SMEs sign off on each level before the persona is allowed to reason over that artifact class. If a scenario the persona should have caught goes wrong on a real record, the corresponding lesson is added and the next promotion has to clear it. The audit for a persona is a record, not a hope.
Two ways in.
The Fiduciary preview is invite-only and covers a real workflow end to end. The A&R design-partner program pairs one operator with one workflow. Either way, the AI proposes and a human signs.