An agent that can read your systems and act on them needs guardrails, the same way a new hire with production access needs an onboarding checklist and someone reviewing their first few changes. That's what Cognous's Open Control Stack is: a manifest declares what an agent may do before it ever runs, a control plane enforces that live, and every run leaves behind a replay bundle — a signed file recording exactly what the agent proposed, what got decided, and what it relied on, so anyone can check it later.
That's real technical proof, and it's the file you'd reach for in a deployment review — except the person running that review isn't going to open a JSON file and check whether a signature is valid. They're going to ask what the agent is for, what it can touch, what got blocked, and whether you can prove it, and they want that answer in a document, not a file they have to parse.
That's the gap Agent Governance Evidence Pack closes. It doesn't record anything at runtime and it doesn't replace the replay bundle. It's where someone — a human, for now — turns the technical record into the document a risk committee actually reads.
The Report Itself
Cognous's tooling for this layer is agep — a schema, a validator, and a renderer. Run agep render on a completed pack and this is what comes out:
