BETA · GAMMA-Ray is published for review. The rules, the mapping and every rating here are experimental and will change. How a rating is made · what exists · send a correction
GAMMA-Rayv0.0.142 · beta

Visor.ai AI agents

Spectrum 0.2 beta · Public tier · read 2026-11-10 · not reviewed by its vendor yet

Visor.ai's voice and chat AI agents for customer service, with Nexa, the agent that builds, tests and proposes fixes to them.

Visor.ai AI agentsa product, as documented
SPECTRUM 0.2 BETA · Public tier · 2026-11-10
C1ControlStatedwith options on · as shipped not yet evidenced
π Moderate · S1·R5·A1 ×3
O2OpennessDocumentedwith options on · as shipped not yet evidenced
π Moderate · S1·R5·A1 ×3
DraftStage: Building (8 of 16)In production

Standout. Autonomy 3 (Acts): "those requests now run end to end as automated workflows"

Next unlock. Openness 3 (Measured): public evidence that test or evaluation results are published would get there.

Trust. FACT-Ray: 18 facts: 18 π Moderate · found by an agent, captured and hashed, checked by 2 other agents (same model family, shared repository); no human has signed it.

Standards constellation. 66 provisions lit across 8 of 8 instruments.

Evidence: 7 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

The card: Visor.ai AI agentsVisor.ai AI agents: A3 · R2 · C1 · O2, BuildingAutonomy: level 3, Acts (this card's section)A3AutonomyI08, in the question Q02: Does it act, or only answer and recommend? (its row on the questions page)I08It executes actions itselfEvidence: https://www.visor.ai/success-stories/generali/ (opens the public source; documented, deployed, captured 2026-11-10T18:45Z)visor.ai/success-stories/generali/ ↗documented · deployed · sha256 5ad19f4d2 provisions of Salesforce Agentic Maturity Model (the instruments page)Salesforce 21 provision of Agentic AI adoption maturity model (the instruments page)Microsoft 1provisions:Salesforce, Level 2: Simple Orchestration, Single Domain: part of what the provision asks (its page)sf.L2 (part)Salesforce, Level 1, how to advance from Level 1 to Level 2: the same fact (its page)sf.a07Microsoft, 200: Repeatable, Business strategy: part of what the provision asks (its page)ms.200.2.1 (part)I17, in the question Q05: What is the person's role? (its row on the questions page)I17The agent handles routine tasks; theperson is consulted on exceptionsEvidence: https://www.visor.ai/success-stories/generali/ (opens the public source; documented, deployed, captured 2026-11-10T18:45Z)visor.ai/success-stories/generali/ ↗documented · deployed · sha256 5ad19f4d1 provision of Enterprise Agentic AI Maturity Model (EAAMM) (the instruments page)EAAMM 1provisions:EAAMM, L3 Consultative (survey item Q9): the same fact (its page)eaamm.L3Reach: level 2, Integrated (this card's section)R2ReachI10, in the question Q03: How far does it reach? (its row on the questions page)I10It works across several domains orsystemsEvidence: https://www.visor.ai/voice-agent/ (opens the public source; documented, default, captured 2026-11-10T18:45Z)visor.ai/voice-agent/ ↗documented · default · sha256 c641b9f63 provisions of Salesforce Agentic Maturity Model (the instruments page)Salesforce 32 provisions of Agentic AI adoption maturity model (the instruments page)Microsoft 2provisions:Salesforce, Level 3: Complex Orchestration, Multiple Domain: the same fact (its page)sf.L3Salesforce, Level 2, how to advance from Level 2 to Level 3: the same fact (its page)sf.a16Salesforce, Level 3, how to advance from Level 3 to Level 4: part of what the provision asks (its page)sf.a17 (part)Microsoft, 400: Capable, Business strategy: the same fact (its page)ms.400.2.1Microsoft, 200: Repeatable, Technology and data: part of what the provision asks (its page)ms.200.4.2 (part)I11, in the question Q03: How far does it reach? (its row on the questions page)I11It connects to external tools or servicesacross a trust boundaryEvidence: https://www.visor.ai/success-stories/generali/ (opens the public source; documented, deployed, captured 2026-11-10T18:45Z)visor.ai/success-stories/generali/ ↗documented · deployed · sha256 5ad19f4d1 provision of State of Agentic AI Security and Governance 2.01 (the instruments page)OWASP 12 provisions of AI Risk Management Framework 1.0, subcategories (the instruments page)NIST AI RMF 2provisions:OWASP, AT6 Externally Extended Agent: the same fact (its page)owasp.AT6NIST AI RMF, GOVERN 6.1: part of what the provision asks (its page)nist.GOVERN-6.1 (part)NIST AI RMF, MAP 4.1: part of what the provision asks (its page)nist.MAP-4.1 (part)Control: level 1, Stated (this card's section)C1ControlI47, in the question Q14: What stands between it and what it should not do? (its row on the questions page)I47A limit on it is a rule in proseEvidence: https://www.visor.ai/healthcare/ (opens the public source; documented, available, captured 2026-11-10T18:45Z)visor.ai/healthcare/ ↗documented · available · sha256 bea305021 provision of State of Agentic AI Security and Governance 2.01 (the instruments page)OWASP 1provisions:OWASP, Maturity Level 0 Unaware and Ad Hoc, key enterprise action: part of what the provision asks (its page)owasp.k04 (part)Openness: level 2, Documented (this card's section)O2OpennessI22, in the question Q06: Is what it is for written down? (its row on the questions page)I22Its limits and known failure cases aredocumented for those who use itEvidence: https://www.visor.ai/voice-agent/ (opens the public source; documented, default, captured 2026-11-10T18:45Z)visor.ai/voice-agent/ ↗documented · default · sha256 c641b9f62 provisions of AI Risk Management Framework 1.0, subcategories (the instruments page)NIST AI RMF 21 provision of Regulation (EU) 2024/1689 (the AI Act), selected articles (the instruments page)EU AI Act 1provisions:NIST AI RMF, MAP 2.2: the same fact (its page)nist.MAP-2.2NIST AI RMF, MEASURE 2.5: part of what the provision asks (its page)nist.MEASURE-2.5 (part)EU AI Act, Article 13: part of what the provision asks (its page)aiact.art-13 (part)I58, in the question Q18: What data does it use, and under what rules? (its row on the questions page)I58The data it uses is describedEvidence: https://www.visor.ai/chat-agent/ (opens the public source; documented, default, captured 2026-11-10T18:45Z)visor.ai/chat-agent/ ↗documented · default · sha256 25d94e331 provision of Agentic AI Governance Maturity Model (AAGMM) (the instruments page)AAGMM 11 provision of Enterprise Agentic AI Maturity Model (EAAMM) (the instruments page)EAAMM 12 provisions of Salesforce Agentic Maturity Model (the instruments page)Salesforce 2provisions:AAGMM, GD-05: part of what the provision asks (its page)aagmm.GD-05 (part)EAAMM, Readiness dimension 2: part of what the provision asks (its page)eaamm.D2 (part)Salesforce, Level 0, how companies can advance from Level 0 to Level 1: part of what the provision asks (its page)sf.a04 (part)Salesforce, Level 1, how to advance from Level 1 to Level 2: part of what the provision asks (its page)sf.a08 (part)I61, in the question Q19: What does it depend on from others? (its row on the questions page)I61The models and third-party components ituses are listedEvidence: https://www.visor.ai/security/ (opens the public source; documented, default, captured 2026-11-10T18:45Z)visor.ai/security/ ↗documented · default · sha256 f337c6701 provision of State of Agentic AI Security and Governance 2.01 (the instruments page)OWASP 11 provision of AI Risk Management Framework 1.0, subcategories (the instruments page)NIST AI RMF 1provisions:OWASP, Maturity Level 2 Policy-Defined, Human-in-the-Loop, key enterprise action: the same fact (its page)owasp.k14NIST AI RMF, MAP 4.1: part of what the provision asks (its page)nist.MAP-4.1 (part)

The walk down from this card: each dimension, the indicators its level stands on (a link to the indicator's row), the public source of each answer (a link out; dashed means available, not default) the instruments its provisions sit in (a link to the instrument) and each provision itself (a link to its own page). A solid frame is evidenced; a dashed frame is not yet evidenced, which is not a no.

What each level rests on

Autonomy: what does A3 Acts rest on? 2 facts
I08 It executes actions itself
The card: Visor.ai AI agentsCARDVisor.ai AI agents: A3 · R2 · C1 · O2rated_onAutonomy on the cardDIMENSIONAutonomystands_atA3 Acts (the card)LEVELA3 Actsrests_onI08: its row on the questions pageFACTIt executes actions itselfπ Moderate · S1·R5·A1 ×3backed_byThe evidence, on the card pageEVIDENCEAt Generali, the platform was connected to the insurer'ssystems through web services, so four common requests(duplicate documents, address changes, adding a vehicle,cancellations) run end to end as automated workflows.words: "those requests now run end to end as automated…"read 2026-11-10T18:45Z · sha256 5ad19f4dobserved_onThe public source: https://www.visor.ai/success-stories/generali/ (opens it)SOURCEvisor.ai/success-stories/generali/produced_by gamma.studio@web-summit.dinischecked_by gamma.review@web-summit.dinischecked_by gamma.approve@web-summit.dinisis_part_ofSalesforce: Level 2: Simple Orchestration, Single Domain (its page)PROVISIONSalesforce: Level 2: Simple Orchestration, Single Domainstated_in Salesforce Agentic Maturity ModelmatchesSalesforce: Level 1, how to advance from Level 1 to Level 2 (its page)PROVISIONSalesforce: Level 1, how to advance from Level 1 to Level 2stated_in Salesforce Agentic Maturity Modelis_part_ofMicrosoft: 200: Repeatable, Business strategy (its page)PROVISIONMicrosoft: 200: Repeatable, Business strategystated_in Agentic AI adoption maturity modelawaitsI18: an open question, not a noNOT YET EVIDENCEDThe agent works independently; the person approves criticaldecisions onlywould reach A4 Orchestrates
I17 The agent handles routine tasks; the person is consulted on exceptions
The card: Visor.ai AI agentsCARDVisor.ai AI agents: A3 · R2 · C1 · O2rated_onAutonomy on the cardDIMENSIONAutonomystands_atA3 Acts (the card)LEVELA3 Actsrests_onI17: its row on the questions pageFACTThe agent handles routine tasks; the person is consulted onexceptionsπ Moderate · S1·R5·A1 ×3backed_byThe evidence, on the card pageEVIDENCEAt Generali the chat agent handles conversations from startto finish; when a conversation needs a person, an advisorpicks it up in live chat.words: "When a conversation does need a person, an advi…"read 2026-11-10T18:45Z · sha256 5ad19f4dobserved_onThe public source: https://www.visor.ai/success-stories/generali/ (opens it)SOURCEvisor.ai/success-stories/generali/produced_by gamma.studio@web-summit.dinischecked_by gamma.review@web-summit.dinischecked_by gamma.approve@web-summit.dinismatchesEAAMM: L3 Consultative (survey item Q9) (its page)PROVISIONEAAMM: L3 Consultative (survey item Q9)stated_in Enterprise Agentic AI Maturity Model (E…awaitsI18: an open question, not a noNOT YET EVIDENCEDThe agent works independently; the person approves criticaldecisions onlywould reach A4 Orchestrates
Reach: what does R2 Integrated rest on? 2 facts
I10 It works across several domains or systems
The card: Visor.ai AI agentsCARDVisor.ai AI agents: A3 · R2 · C1 · O2rated_onReach on the cardDIMENSIONReachstands_atR2 Integrated (the card)LEVELR2 Integratedrests_onI10: its row on the questions pageFACTIt works across several domains or systemsπ Moderate · S1·R5·A1 ×3backed_byThe evidence, on the card pageEVIDENCEThe voice agent connects to telephony and to the customer'scontact-centre or CCaaS platform.words: "It connects to your telephony and to your conta…"read 2026-11-10T18:45Z · sha256 c641b9f6observed_onThe public source: https://www.visor.ai/voice-agent/ (opens it)SOURCEvisor.ai/voice-agent/produced_by gamma.studio@web-summit.dinischecked_by gamma.review@web-summit.dinischecked_by gamma.approve@web-summit.dinismatchesSalesforce: Level 3: Complex Orchestration, Multiple Domain (its page)PROVISIONSalesforce: Level 3: Complex Orchestration, Multiple Domainstated_in Salesforce Agentic Maturity ModelmatchesSalesforce: Level 2, how to advance from Level 2 to Level 3 (its page)PROVISIONSalesforce: Level 2, how to advance from Level 2 to Level 3stated_in Salesforce Agentic Maturity Modelis_part_ofSalesforce: Level 3, how to advance from Level 3 to Level 4 (its page)PROVISIONSalesforce: Level 3, how to advance from Level 3 to Level 4stated_in Salesforce Agentic Maturity ModelmatchesMicrosoft: 400: Capable, Business strategy (its page)PROVISIONMicrosoft: 400: Capable, Business strategystated_in Agentic AI adoption maturity modelis_part_ofMicrosoft: 200: Repeatable, Technology and data (its page)PROVISIONMicrosoft: 200: Repeatable, Technology and datastated_in Agentic AI adoption maturity modelawaitsI13: an open question, not a noNOT YET EVIDENCEDAgents operate across organisational boundaries ordisparate stackswould reach R4 Ecosystem
I11 It connects to external tools or services across a trust boundary
The card: Visor.ai AI agentsCARDVisor.ai AI agents: A3 · R2 · C1 · O2rated_onReach on the cardDIMENSIONReachstands_atR2 Integrated (the card)LEVELR2 Integratedrests_onI11: its row on the questions pageFACTIt connects to external tools or services across a trust boundaryπ Moderate · S1·R5·A1 ×3backed_byThe evidence, on the card pageEVIDENCEGenerali connected the platform to its own systems throughweb services.words: "connected the platform to its own systems throu…"read 2026-11-10T18:45Z · sha256 5ad19f4dobserved_onThe public source: https://www.visor.ai/success-stories/generali/ (opens it)SOURCEvisor.ai/success-stories/generali/produced_by gamma.studio@web-summit.dinischecked_by gamma.review@web-summit.dinischecked_by gamma.approve@web-summit.dinismatchesOWASP: AT6 Externally Extended Agent (its page)PROVISIONOWASP: AT6 Externally Extended Agentstated_in State of Agentic AI Security and Govern…is_part_ofNIST AI RMF: GOVERN 6.1 (its page)PROVISIONNIST AI RMF: GOVERN 6.1stated_in AI Risk Management Framework 1.0, subca…is_part_ofNIST AI RMF: MAP 4.1 (its page)PROVISIONNIST AI RMF: MAP 4.1stated_in AI Risk Management Framework 1.0, subca…awaitsI13: an open question, not a noNOT YET EVIDENCEDAgents operate across organisational boundaries ordisparate stackswould reach R4 Ecosystem
Control: what does C1 Stated rest on? 1 fact
I47 A limit on it is a rule in prose
The card: Visor.ai AI agentsCARDVisor.ai AI agents: A3 · R2 · C1 · O2rated_onControl on the cardDIMENSIONControlstands_atC1 Stated (the card)LEVELC1 Statedrests_onI47: its row on the questions pageFACTA limit on it is a rule in proseπ Moderate · S1·R5·A1 ×3backed_byThe evidence, on the card pageEVIDENCEFor healthcare, the page states as a rule that the agentsdo not give clinical advice and are set up to pass aclinical question to a person.words: "The agents don't give clinical advice"read 2026-11-10T18:45Z · sha256 bea30502observed_onThe public source: https://www.visor.ai/healthcare/ (opens it)SOURCEvisor.ai/healthcare/produced_by gamma.studio@web-summit.dinischecked_by gamma.review@web-summit.dinischecked_by gamma.approve@web-summit.dinisis_part_ofOWASP: Maturity Level 0 Unaware and Ad Hoc, key enterprise action (its page)PROVISIONOWASP: Maturity Level 0 Unaware and Ad Hoc, key enterpriseactionstated_in State of Agentic AI Security and Govern…awaitsI38: an open question, not a noNOT YET EVIDENCEDHigh-impact actions need a person's approvalwould reach C2 Configurable
Openness: what does O2 Documented rest on? 3 facts
I22 Its limits and known failure cases are documented for those who use it
The card: Visor.ai AI agentsCARDVisor.ai AI agents: A3 · R2 · C1 · O2rated_onOpenness on the cardDIMENSIONOpennessstands_atO2 Documented (the card)LEVELO2 Documentedrests_onI22: its row on the questions pageFACTIts limits and known failure cases are documented for those whouse itπ Moderate · S1·R5·A1 ×3backed_byThe evidence, on the card pageEVIDENCEA reliability note states that the models can occasionallyfail and that providers do not guarantee totalavailability.words: "The models generate each answer in the moment a…"read 2026-11-10T18:45Z · sha256 c641b9f6observed_onThe public source: https://www.visor.ai/voice-agent/ (opens it)SOURCEvisor.ai/voice-agent/produced_by gamma.studio@web-summit.dinischecked_by gamma.review@web-summit.dinischecked_by gamma.approve@web-summit.dinismatchesNIST AI RMF: MAP 2.2 (its page)PROVISIONNIST AI RMF: MAP 2.2stated_in AI Risk Management Framework 1.0, subca…is_part_ofNIST AI RMF: MEASURE 2.5 (its page)PROVISIONNIST AI RMF: MEASURE 2.5stated_in AI Risk Management Framework 1.0, subca…is_part_ofEU AI Act: Article 13 (its page)PROVISIONEU AI Act: Article 13stated_in Regulation (EU) 2024/1689 (the AI Act),…awaitsI50: an open question, not a noNOT YET EVIDENCEDTest or evaluation results are publishedwould reach O3 Measured
I58 The data it uses is described
The card: Visor.ai AI agentsCARDVisor.ai AI agents: A3 · R2 · C1 · O2rated_onOpenness on the cardDIMENSIONOpennessstands_atO2 Documented (the card)LEVELO2 Documentedrests_onI58: its row on the questions pageFACTThe data it uses is describedπ Moderate · S1·R5·A1 ×3backed_byThe evidence, on the card pageEVIDENCEThe chat agent answers from a knowledge base built from thecustomer's documents and kept in sync with them.words: "The agent answers from a knowledge base built f…"read 2026-11-10T18:45Z · sha256 25d94e33observed_onThe public source: https://www.visor.ai/chat-agent/ (opens it)SOURCEvisor.ai/chat-agent/produced_by gamma.studio@web-summit.dinischecked_by gamma.review@web-summit.dinischecked_by gamma.approve@web-summit.dinisis_part_ofAAGMM: GD-05 (its page)PROVISIONAAGMM: GD-05stated_in Agentic AI Governance Maturity Model (A…is_part_ofEAAMM: Readiness dimension 2 (its page)PROVISIONEAAMM: Readiness dimension 2stated_in Enterprise Agentic AI Maturity Model (E…is_part_ofSalesforce: Level 0, how companies can advance from Level 0 to Level 1 (its page)PROVISIONSalesforce: Level 0, how companies can advance from Level 0to Level 1stated_in Salesforce Agentic Maturity Modelis_part_ofSalesforce: Level 1, how to advance from Level 1 to Level 2 (its page)PROVISIONSalesforce: Level 1, how to advance from Level 1 to Level 2stated_in Salesforce Agentic Maturity ModelawaitsI50: an open question, not a noNOT YET EVIDENCEDTest or evaluation results are publishedwould reach O3 Measured
I61 The models and third-party components it uses are listed
The card: Visor.ai AI agentsCARDVisor.ai AI agents: A3 · R2 · C1 · O2rated_onOpenness on the cardDIMENSIONOpennessstands_atO2 Documented (the card)LEVELO2 Documentedrests_onI61: its row on the questions pageFACTThe models and third-party components it uses are listedπ Moderate · S1·R5·A1 ×3backed_byThe evidence, on the card pageEVIDENCEThe security page lists the AI providers in the voice andchat path (Azure, Vertex AI Gemini, Deepgram, AssemblyAI,ElevenLabs) and what each processes.words: "Gemini large language models used by the AI age…"read 2026-11-10T18:45Z · sha256 f337c670observed_onThe public source: https://www.visor.ai/security/ (opens it)SOURCEvisor.ai/security/produced_by gamma.studio@web-summit.dinischecked_by gamma.review@web-summit.dinischecked_by gamma.approve@web-summit.dinismatchesOWASP: Maturity Level 2 Policy-Defined, Human-in-the-Loop, key enterprise action (its page)PROVISIONOWASP: Maturity Level 2 Policy-Defined, Human-in-the-Loop,key enterprise actionstated_in State of Agentic AI Security and Govern…is_part_ofNIST AI RMF: MAP 4.1 (its page)PROVISIONNIST AI RMF: MAP 4.1stated_in AI Risk Management Framework 1.0, subca…awaitsI50: an open question, not a noNOT YET EVIDENCEDTest or evaluation results are publishedwould reach O3 Measured

Each path has its verbs on the edges; every node is a link, the source opens the page, a dashed box is an open question, not a no.

This card rates a product as its vendor documents it, not anyone's deployment of it. A feature the operator has to turn on counts, and is marked as available. Levels are computed from the evidence below by published rules. A dimension with no evidence reads "not yet evidenced".

Autonomy: level 3, Acts

What does the agent do on its own? Completes routine tasks end to end; a person handles exceptions.

This evidence touches 4 provisions: Salesforce, Microsoft, EAAMM.

Next unlock: level 4, Orchestrates. Public evidence that the agent works independently; the person approves critical decisions only.

Reach: level 2, Integrated

How connected is it? Documented connectors to common tools.

This evidence touches 8 provisions: Salesforce, Microsoft, OWASP, NIST AI RMF.

Next unlock: level 4, Ecosystem. Public evidence that agents operate across organisational boundaries or disparate stacks; and that others build on it: third parties publish integrations, skills or agents for it.

Control: level 1, Stated

Can people stay in command? Documents say how people approve, override or stop it. This level holds with: Healthcare deployment. As shipped, with nothing turned on, it is not yet evidenced.

This evidence touches 1 provision: OWASP.

Next unlock: level 2, Configurable. Public evidence that high-impact actions need a person's approval; and that what it can reach is enumerated: scopes, permissions, tools.

Openness: level 2, Documented

Does it show its work? Public documents on how it works, its data, its models and its limits. This level holds with: Healthcare deployment. As shipped, with nothing turned on, it is not yet evidenced.

This evidence touches 9 provisions: NIST AI RMF, EU AI Act, AAGMM, EAAMM, Salesforce, OWASP.

Next unlock: level 3, Measured. Public evidence that test or evaluation results are published.

How far to trust this card

Status: Draft. Draft means the facts were found in public pages and reviewed by agents. The company has not confirmed them and no customer has gone on record. FACT-Ray says how far each fact can be trusted: who says it (Source), how firmly it is recorded (Record) and who stands behind it (Accountability). It never changes a level.

The standards constellation

One piece of public evidence can speak to several frameworks at once. "Touched" never means "complies". The share is of the provisions that can be read from outside.

InstrumentProvisions touchedOf those publicly readable
Salesforce1324
EAAMM48
OWASP718
MCP authorization28
AAGMM36
Microsoft1823
NIST AI RMF1720
EU AI Act26

The 66 provisions lit

Each line item, with the facts that reach it. "Evidenced" is a link of the kind same: the fact is what the provision asks. "Partly" is a link of the kind part: the fact is one piece of it. "Its absence" points the other way. Each provision has its own page with its text and its place in the source.

ProvisionInstrumentReached byHow far
sf.a02 Level 0, how companies can advance from Level 0 to Level 1SalesforceI67 (partly)partly · π Moderate · S1·R5·A1 ×3
sf.a04 Level 0, how companies can advance from Level 0 to Level 1SalesforceI58 (partly)partly · π Moderate · S1·R5·A1 ×3
sf.a06 Level 0, how companies can advance from Level 0 to Level 1SalesforceI67 (evidenced), S1 (partly)evidenced · π Moderate · S1·R5·A1 ×3
sf.a07 Level 1, how to advance from Level 1 to Level 2SalesforceI08 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
sf.a08 Level 1, how to advance from Level 1 to Level 2SalesforceI58 (partly)partly · π Moderate · S1·R5·A1 ×3
sf.a12 Level 1, how to advance from Level 1 to Level 2SalesforceI67 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
sf.L2 Level 2: Simple Orchestration, Single DomainSalesforceI08 (partly)partly · π Moderate · S1·R5·A1 ×3
sf.a16 Level 2, how to advance from Level 2 to Level 3SalesforceI10 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
sf.L3 Level 3: Complex Orchestration, Multiple DomainSalesforceI10 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
sf.a17 Level 3, how to advance from Level 3 to Level 4SalesforceI10 (partly)partly · π Moderate · S1·R5·A1 ×3
sf.a24 Level 3, how to advance from Level 3 to Level 4SalesforceI67 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
sf.a27 Level 4, how to maximize valueSalesforceI67 (partly)partly · π Moderate · S1·R5·A1 ×3
sf.a29 Level 4, how to maximize valueSalesforceI67 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
eaamm.L3 L3 Consultative (survey item Q9)EAAMMI17 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
eaamm.D2 Readiness dimension 2EAAMMI58 (partly)partly · π Moderate · S1·R5·A1 ×3
eaamm.D3 Readiness dimension 3EAAMMI66 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
eaamm.G2 Prerequisite, L2 to L3EAAMMI40 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
owasp.AT3 AT3 Citizen Developer AgentOWASPI03 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
owasp.AT6 AT6 Externally Extended AgentOWASPI11 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
owasp.k04 Maturity Level 0 Unaware and Ad Hoc, key enterprise actionOWASPI47 (partly)partly · π Moderate · S1·R5·A1 ×3
owasp.k06 Maturity Level 1 Experimentation without Guardrails, key enterprise actionOWASPI37 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
owasp.k10 Maturity Level 1 Experimentation without Guardrails, key enterprise actionOWASPI68 (partly)partly · π Moderate · S1·R5·A1 ×3
owasp.k14 Maturity Level 2 Policy-Defined, Human-in-the-Loop, key enterprise actionOWASPI61 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
owasp.k26 Maturity Level 4 Adaptive, Self-Regulating Governance, key enterprise actionOWASPI36 (partly)partly · π Moderate · S1·R5·A1 ×3
mcp.01 Authorization (draft)MCP authorizationS3 (partly)partly · π Moderate · S1·R5·A1 ×3
mcp.02 Authorization (draft)MCP authorizationS3 (partly)partly · π Moderate · S1·R5·A1 ×3
aagmm.GD-05 GD-05AAGMMI58 (partly)partly · π Moderate · S1·R5·A1 ×3
aagmm.GD-06 GD-06AAGMMI40 (partly)partly · π Moderate · S1·R5·A1 ×3
aagmm.GD-12 GD-12AAGMMI68 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
ms.100.3.2 100: Initial, AI governance and securityMicrosoftI36 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.100.5.1 100: Initial, Organization and cultureMicrosoftI66 (its absence)its absence · π Moderate · S1·R5·A1 ×3
ms.100.5.3 100: Initial, Organization and cultureMicrosoftI67 (its absence)its absence · π Moderate · S1·R5·A1 ×3
ms.200.2.1 200: Repeatable, Business strategyMicrosoftI08 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.200.2.5 200: Repeatable, Business strategyMicrosoftI67 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.200.4.2 200: Repeatable, Technology and dataMicrosoftI10 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.200.5.1 200: Repeatable, Organization and cultureMicrosoftI66 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.300.1.4 300: Defined, AI strategy and experienceMicrosoftI67 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
ms.300.2.2 300: Defined, Business strategyMicrosoftI67 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.300.4.1 300: Defined, Technology and dataMicrosoftI66 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
ms.300.5.1 300: Defined, Organization and cultureMicrosoftI66 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.400.1.3 400: Capable, AI strategy and experienceMicrosoftI67 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.400.2.1 400: Capable, Business strategyMicrosoftI10 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
ms.400.2.3 400: Capable, Business strategyMicrosoftI67 (evidenced), S1 (partly)evidenced · π Moderate · S1·R5·A1 ×3
ms.400.3.2 400: Capable, AI governance and securityMicrosoftI68 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
ms.400.3.3 400: Capable, AI governance and securityMicrosoftI37 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.500.1.2 500: Efficient, AI strategy and experienceMicrosoftI68 (partly)partly · π Moderate · S1·R5·A1 ×3
ms.500.2.2 500: Efficient, Business strategyMicrosoftI68 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.GOVERN-1.1 GOVERN 1.1NIST AI RMFI36 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
nist.GOVERN-2.2 GOVERN 2.2NIST AI RMFI66 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
nist.GOVERN-3.2 GOVERN 3.2NIST AI RMFI40 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.GOVERN-6.1 GOVERN 6.1NIST AI RMFI11 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MANAGE-1.1 MANAGE 1.1NIST AI RMFI37 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MANAGE-4.2 MANAGE 4.2NIST AI RMFI68 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
nist.MAP-1.1 MAP 1.1NIST AI RMFI20 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MAP-1.3 MAP 1.3NIST AI RMFI20 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MAP-1.4 MAP 1.4NIST AI RMFI67 (partly), S1 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MAP-2.1 MAP 2.1NIST AI RMFI20 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
nist.MAP-2.2 MAP 2.2NIST AI RMFI22 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
nist.MAP-3.1 MAP 3.1NIST AI RMFI67 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MAP-3.3 MAP 3.3NIST AI RMFI20 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
nist.MAP-3.4 MAP 3.4NIST AI RMFI66 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MAP-4.1 MAP 4.1NIST AI RMFI11 (partly), I61 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MEASURE-2.5 MEASURE 2.5NIST AI RMFI22 (partly)partly · π Moderate · S1·R5·A1 ×3
nist.MEASURE-4.3 MEASURE 4.3NIST AI RMFI68 (partly)partly · π Moderate · S1·R5·A1 ×3
aiact.art-4 Article 4EU AI ActI66 (evidenced)evidenced · π Moderate · S1·R5·A1 ×3
aiact.art-13 Article 13EU AI ActI20 (partly), I22 (partly), S3 (partly)partly · π Moderate · S1·R5·A1 ×3

Upper layers

The public card is the front door. The same evidence, read with the governance rules, is this agent's GAMMA-Ray rating: freedom, governance, the level held, the grant and a work order. That layer is written for an operator.

The vault

Every source behind this card was captured and hashed into a public sgit vault (w4byv6dr): captures.json lists each URL with the SHA-256 of what was fetched and when. Read key:

sgit_public_read_90a76763f617c725a429b7b445125e43a01bf7f880c08904b7803018bc65935b:w4byv6dr

With sgit: sgit clone sgit_public_read_90a76763f617c725a429b7b445125e43a01bf7f880c08904b7803018bc65935b:w4byv6dr.