Home / Agent services / Configuration
Configuration Guardrails Live Stripe
Configuration is the written answer to five questions: what data the agent may see, which actions it may take, what it may spend, what the audit trail contains, and who owns the kill switch. Buy this when a prototype already exists and must not go unattended.
Put the allowlist on paper before the next unattended tool call.
Config Sprint $3,200 Governance notesSomeone wired Slack or the CRM to a model. It works in a happy path and has no owner. Config Sprint writes the allowlist and the stop rules.
Data, actions, spend, audit, ownership. Governance Config produces the pack you can show a control owner. Process language — not a fake SOC 2 or HIPAA badge.
Config Retainer is change control: who may edit tools and gates, with a log. It is not a substitute for maintenance monitoring.
$3,200 one-time
One existing agent. We write the allowlist, HITL gates, spend envelope, and named owner. You get a config sheet and a working change in the runtime.
$6,500 one-time
The pack for a control owner: data boundary, policy pack, audit log, kill switch test, and a 45-minute CIO/CISO readout. Still not a certification.
$1,500 /month
Monthly change control for prompts, tools, gates, and envelopes. Cancel anytime. Pair with Care Plan if you also need monitoring.
| Control | Default | You decide |
|---|---|---|
| Tools | Read and draft | Which writes are allowed, and who approves |
| Data | Named systems and fields only | Tenants, PII, and what stays out of prompts |
| Spend | Hard envelope + retry cap | The number and who gets the alert |
| HITL | On for irreversible / high-cost | The queue the human watches |
| Kill switch | Disable without taking the stack down | Who can press it |
If there is no agent yet, buy installation. Configuration assumes something already runs.
We will not put SOC 2, HIPAA, ISO, or EU AI Act badges on this page. Counsel and your auditor decide what is enough. Regulated paths: fintech, healthcare.
We set an envelope. We do not renegotiate your model vendor. Cloud and token waste maps live on FinOps consulting.
Yes, if we can set allowlists, gates, and a kill switch on that platform. If the vendor will not expose those controls, we will say so in the first working session and refund is not automatic — write us before you pay if the stack is exotic.
Config Sprint is enough when the owner is already named and the risk is operational. Governance Config is for a control owner who needs a pack and a readout. Do not buy both on the same agent in the same week — Governance includes Sprint.
Stripe returns you to /contact/?paid=…. We reply within 24 hours with the access we need (runtime, tool list, current prompts).
See also: All agent SKUs · Enterprise governance · PT-BR