System Management Facilities

Rocket's mainframe agent must clear a policy check before every action it proposes

PlanGuard evaluates the caller, the request and the tool each time Rocket's EVA agent proposes an action, then issues an execution identity that is revoked when the task ends. The pilots Rocket describes are investigations.