Fragmented evidence
Voice, SMS, email and tool calls each leave a log in a different system. Nobody can reconstruct one session end to end, so nobody can defend it.
Netwit runs agents inside Fortune 50 operations and built the control plane that proves what they did. Assure registers every agent, enforces policy in under 25 ms, and keeps a hash-chained record in Canada. If you build agents, models or vertical tools, this is the runtime, the compute and the distribution you would otherwise spend two years assembling.
Illustrative trace. No customer data.
Every platform now ships a console that watches its own agents. Almost nobody can prove, across vendors, what an agent did, on whose authority, with which data, and whether the policy held. When an agent leaks data or breaches consent rules, the deployer carries the liability — and the deployer is the one who cannot produce the file.
Voice, SMS, email and tool calls each leave a log in a different system. Nobody can reconstruct one session end to end, so nobody can defend it.
A platform console governs its own agents. A CIO running four vendors needs one registry and one ledger that outlives any of them.
Underwriters ask for control evidence, not assurances. Without a standard pack, agent exposure lands in silent cover, or in a decline.
Every control in Assure came from operating agents for paying clients — voice, messaging, email, clinical — before it was a product. The modules below are the ones we will demonstrate live, with their status stated exactly as it stands.
This is not a single product with an API bolted on. It is a lab, a runtime, a trust plane and a portfolio, and each layer is a legitimate place to attach.
You do not have to adopt the whole stack. Pick the seam that matches your product and prove it inside a sprint.
Route your agent's calls through the Assure gateway for registry, policy checks and recording. The reference SDK is live; a first trace typically takes days.
Expose your product's capabilities as MCP tools so any governed agent can call them with scoped permissions and a full audit trail.
Send test, observability or identity results into the ledger through a cryptographically signed import bridge. One adapter, one four-week sprint.
Customers are under NDA, so we show the archetype and the number. Each one is verifiable in the data room, and none of them is a projection.
Anonymised outcomes, verified individually under NDA. No composite score, no review stars, no customer counts.
Each sits on top of what already exists, so the build is quarters, not years. Each has an open seat, and the partner shapes the product rather than reselling it.
Non-human identity is a ~US$1B security category.
Short-lived scoped credentials, per-agent revocation, credential-use ledger.
Agent-to-agent calls need policy at the boundary.
Signed delegation, cross-organisation logs.
Payment rails for agents are live and unguarded.
Spend limits, consent, receipts, dispute evidence.
EU transparency duties and consent enforcement on live calls.
Bilingual disclosure, DNC enforcement, automated QA scoring.
Security operations are being rebuilt around agents.
Scoped tools, human approval gates, tamper-evident case records.
Provincial AI-scribe guidance demands consent and deletion.
Consent capture, retention enforcement, review logs, PIA drafts.
Simulation and robotics converge; failure testing is costly.
Physics-grounded gyms, synthetic failures, actuator kill switches.
Canadian procurement now asks where inference runs.
Policy-driven gateway and evidence in front of Canadian pods.
Eighteen years building AI and infrastructure across Canada, the UAE and India. ISC2/CISSP-credentialed, fractional CTO, and founder of the Lower Mainland Business Alliance. Operates the runtime and the lab this programme runs on.
One call, a scored fit, then a thirty-day sprint on our infrastructure. Either side can stop at any gate.