Sub-function
Security Engineering
Owns finding work end to end inside Engineering. Runs 3 lines across 19 stations, drains the repeatable share into the IT tower, and holds 4 human gates.
Estate rating
A
76 / 100
Scanning, credential revocation and low-risk patching are automatic because speed is the control. Critical vulnerabilities always get a named human owner with a clock.
Agents
8
Lines
3
Units / wk
7,570
Timetable vs actual
8.4h → 9.2h
Cost / unit
$13
was $47
Run-rate saving
$13.4M
annualized at this volume
The 8 agents running this sub-function
Grouped by what they are for, not by where they sit. The agent org is process-shaped.
Security Engineering Orchestrator
Owns the security engineering lane end to end. Sequences the other agents, holds the timetable, and decides what surfaces to a human.
ceiling A3 · escalates to Escalates to Director, Security Engineering when the unit falls outside the decision envelope or confidence drops below the floor.
Vulnerability Scanning Agent
Runs the repeatable portion of security engineering inside the shared transaction spine at spine cost and spine controls.
ceiling A3 · escalates to Escalates to Director, Security Engineering when the unit falls outside the decision envelope or confidence drops below the floor.
Threat Modeling Agent
Runs the repeatable portion of security engineering inside the shared transaction spine at spine cost and spine controls.
ceiling A3 · escalates to Escalates to Director, Security Engineering when the unit falls outside the decision envelope or confidence drops below the floor.
Dependency Risk Agent
Executes the security engineering step it owns, posts its evidence, and hands the unit to the next stage.
ceiling A3 · escalates to Escalates to Director, Security Engineering when the unit falls outside the decision envelope or confidence drops below the floor.
Patch Orchestration Agent
Executes the security engineering step it owns, posts its evidence, and hands the unit to the next stage.
ceiling A3 · escalates to Escalates to Director, Security Engineering when the unit falls outside the decision envelope or confidence drops below the floor.
Secret Detection Agent
Holds the rules that bind every other agent in security engineering. Versions them, tests them against live decisions, and blocks work that breaches them.
ceiling A3 · escalates to Escalates on any decision that would breach a live policy version, with the clause cited.
Security Policy Agent
Holds the rules that bind every other agent in security engineering. Versions them, tests them against live decisions, and blocks work that breaches them.
ceiling A3 · escalates to Escalates on any decision that would breach a live policy version, with the clause cited.
Security Engineering Challenger Agent
Adversarial reviewer for security engineering. Argues the opposite case on every position and flags where the evidence does not carry the claim.
ceiling A3 · escalates to Escalates when a ratified position is still running against a break condition it flagged.
Estate rating breakdown
Seven control dimensions. Judgment readiness runs against autonomy on purpose.
People
What the humans stopped doing, and what they do now.
Redeployed into exception judgment and supplier relationship work.
Lines running in this sub-function
Each line is a workflow. Click a line to walk it station by station.
Strategy positions this sub-function holds
An agent that only executes is a robot. These are the calls it made, the argument against each one, and what would prove it wrong.
Threat Model Review
Ratifiedv4Should finding work stay in the shared transaction spine, or come back inside the function where the context lives?
Hold the ceiling at A3 for security engineering. Scanning, credential revocation and low-risk patching are automatic because speed is the control. Critical vulnerabilities always get a named human owner with a clock. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.
confidence
70%
The challenge — Security Engineering Challenger Agent
Security Engineering Challenger Agent argues the recommendation leans on 3 quarters of data from a period with no volume shock. The confidence band overlaps the alternative, and the position does not say what it would take to be wrong. Recorded as a dissent, not a block.
Break conditions
- ·Override rate rises above 15 percent for two consecutive months
- ·Cost per finding stops falling while volume keeps rising
- ·A control failure in this lane reaches a customer or a regulator
Evidence gaps
- ·No external comparator on a like-for-like unit definition
- ·Exception cases under $12k are sampled, not fully measured
| Alternative considered | Cost | Risk | Verdict |
|---|---|---|---|
| Hold the current position | $500k run rate | Known and priced. Cedes ground if comparators move faster. | not selected |
| Raise the ceiling one level now | $1140k to build controls | Override rate is 9 percent; raising the ceiling before that settles imports the error into production. | rejected on evidence |
| Move the exception tail to the spine | $604k transition | Loses local context. Rework risk on the cases that are hardest to recover. | selected |
Ratified 4 months ago. Measured since: cost per finding rose 4 percent against a forecast that it would fall 16 percent.
Policy register
The rules the agents above are bound by. Version, owner, approver, and the agents each rule constrains.
| Ref | Rule | Scope | Owner agent | Approved by | Version | Status |
|---|---|---|---|---|---|---|
| EN10-POL-200 | Security Engineering Decision Envelope Agents in this lane may act without a human when the finding sits inside the stated value, risk and confidence envelope. Outside it, the unit holds at a gate with a named approver and a running clock. binds 4 agents · APAC | envelope | Secret Detection Agent | Director, Security Engineering | v1.6 | Active |
| EN10-POL-201 | Security Engineering Evidence Standard Every autonomous decision writes inputs, the rule version applied, the model and prompt version, the output and a reversal path. An action with no evidence record is treated as a control failure, not a fast decision. binds 4 agents · Global | evidence | Secret Detection Agent | Director, Security Engineering | v3.4 | Active |
| EN10-POL-202 | Security Engineering Escalation Rule Escalation is mandatory when confidence falls below the floor, when two options sit inside the confidence band, or when a break condition on a ratified position fires. Director, Security Engineering owns the response clock. binds 4 agents · Global | escalation | Secret Detection Agent | Director, Security Engineering | v5.1 | Active |