AI 可以提出建议。Zof 判断它是否具备获得操作权限的充分依据。
Control Plane 将变更、系统上下文、风险、证据和企业策略整合为可强制执行的决策，并在操作实际发生的位置应用。
五项输入。 一个可强制执行的决策。
对于经由 Zof 处理的操作，Control Plane 会评估提议的变更、系统上下文、风险、证据和企业策略。
提出什么，由谁或什么提出，以及范围是什么。
System Graph 指出变更可能影响什么，以及影响有多关键。
受影响路径的关键程度、影响范围和事件历史。
Verification Engine 已经证明了什么，还有什么缺失。
组织设定的规则：所需证据、审批人、变更窗口和数据边界。
技术要求已满足。Payments Tier 0 策略要求在发布前由具名人员审批。
Four decisions today. Finer-grained control as policy matures.
Decisions are explicit and machine-enforceable. The initial vocabulary covers the cases most enterprises need first; advanced decisions shape how an allowed action runs.
Evidence and policy are satisfied. The action may proceed.
Policy forbids the action, or evidence shows it should not run.
Specific verification is missing. The action waits until it is produced.
Technical requirements are met, but policy demands a named human decision.
Allow with constraints on scope, time, or environment.
Allow a bounded rollout and observe before widening it.
Reverse an action whose observed outcome violates policy.
Propose a fix, which then earns its own right to run.
Not another dashboard. Enforced where actions happen.
A control decision is only worth something if it can stop an action. Zof applies decisions at the boundaries where consequential actions actually run.
- CI/CD pipelines
Merge and deploy gates in GitHub, GitLab, Jenkins, CircleCI, and Azure DevOps.
- Deployment infrastructure
Release promotion, environment changes, and infrastructure actions.
- Autonomous agent tooling
The tools coding agents and autonomous systems use to act, so proposals wait for a decision.
- Other action boundaries
Any boundary where a consequential action crosses into production can carry a Zof decision.
策略、角色和审批 是基本要素。
RBAC、SSO、具名审批、各环境的自主级别、数据边界和审计轨迹，是组织向 Control Plane 表达策略的方式。
- 分别定义提出、验证和批准变更的职责。
- 让受治理的操作和回滚经过配置的策略决策。
- 将决策记录与所使用的策略版本保持关联。
模型越智能， 独立控制就越重要。
随着前沿模型和编程智能体承担影响更大的操作，问题从它们能否行动转变为它们是否应该行动。具备系统上下文、证据和策略的独立层，是企业回答这一问题的方式。
在重大操作前设置独立决策
预约 Reliability Sprint，在您的一个系统上查看这一闭环，或与 Zof 讨论您的控制模型。
- 策略要求时由人工审批
- 将策略关卡连接到 CI/CD 和智能体工具
- 私有部署选项
