Sub-function
Identity & Access
Owns access request work end to end inside Information Technology. Runs 3 lines across 19 stations, drains the repeatable share into the IT tower, and holds 2 human gates.
Estate rating
A
77 / 100
Standard joiner and leaver flows are fully touchless and faster than any human process. Privileged and out-of-role access always requires a named approver and expires automatically.
Agents
9
Lines
3
Units / wk
18,004
Timetable vs actual
9.4h → 10.5h
Cost / unit
$5.19
was $18
Run-rate saving
$11.9M
annualized at this volume
The 9 agents running this sub-function
Grouped by what they are for, not by where they sit. The agent org is process-shaped.
Identity Orchestrator
Owns the identity & access lane end to end. Sequences the other agents, holds the timetable, and decides what surfaces to a human.
ceiling A4 · escalates to Escalates to Director, Identity & Access Management when the unit falls outside the decision envelope or confidence drops below the floor.
Joiner Provisioning Agent
Runs the repeatable portion of identity & access inside the shared transaction spine at spine cost and spine controls.
ceiling A4 · escalates to Escalates to Director, Identity & Access Management when the unit falls outside the decision envelope or confidence drops below the floor.
Entitlement Review Agent
Runs the repeatable portion of identity & access inside the shared transaction spine at spine cost and spine controls.
ceiling A4 · escalates to Escalates to Director, Identity & Access Management when the unit falls outside the decision envelope or confidence drops below the floor.
Mover Adjustment Agent
Executes the identity & access step it owns, posts its evidence, and hands the unit to the next stage.
ceiling A4 · escalates to Escalates to Director, Identity & Access Management when the unit falls outside the decision envelope or confidence drops below the floor.
Leaver Deprovisioning Agent
Executes the identity & access step it owns, posts its evidence, and hands the unit to the next stage.
ceiling A4 · escalates to Escalates to Director, Identity & Access Management when the unit falls outside the decision envelope or confidence drops below the floor.
Privileged Access Agent
Executes the identity & access step it owns, posts its evidence, and hands the unit to the next stage.
ceiling A4 · escalates to Escalates to Director, Identity & Access Management when the unit falls outside the decision envelope or confidence drops below the floor.
Duty Conflict Agent
Holds the rules that bind every other agent in identity & access. Versions them, tests them against live decisions, and blocks work that breaches them.
ceiling A4 · escalates to Escalates on any decision that would breach a live policy version, with the clause cited.
Access Policy Agent
Holds the rules that bind every other agent in identity & access. Versions them, tests them against live decisions, and blocks work that breaches them.
ceiling A4 · escalates to Escalates on any decision that would breach a live policy version, with the clause cited.
Identity & Access Challenger Agent
Adversarial reviewer for identity & access. Argues the opposite case on every position and flags where the evidence does not carry the claim.
ceiling A4 · escalates to Escalates when a ratified position is still running against a break condition it flagged.
Estate rating breakdown
Seven control dimensions. Judgment readiness runs against autonomy on purpose.
People
What the humans stopped doing, and what they do now.
Redeployed into exception judgment and supplier relationship work.
Lines running in this sub-function
Each line is a workflow. Click a line to walk it station by station.
Strategy positions this sub-function holds
An agent that only executes is a robot. These are the calls it made, the argument against each one, and what would prove it wrong.
Identity & Access Operating Position
Supersededv2Should access request work stay in the shared transaction spine, or come back inside the function where the context lives?
Hold the ceiling at A4 for identity & access. Standard joiner and leaver flows are fully touchless and faster than any human process. Privileged and out-of-role access always requires a named approver and expires automatically. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.
confidence
88%
The challenge — Identity & Access Challenger Agent
Identity & Access Challenger Agent argues the recommendation leans on 4 quarters of data from a period with no volume shock. The confidence band overlaps the alternative, and the position does not say what it would take to be wrong. Recorded as a dissent, not a block.
Break conditions
- ·Override rate rises above 11 percent for two consecutive months
- ·Cost per access request stops falling while volume keeps rising
- ·A control failure in this lane reaches a customer or a regulator
Evidence gaps
- ·No external comparator on a like-for-like unit definition
- ·Exception cases under $55k are sampled, not fully measured
| Alternative considered | Cost | Risk | Verdict |
|---|---|---|---|
| Hold the current position | $164k run rate | Known and priced. Cedes ground if comparators move faster. | live |
| Raise the ceiling one level now | $983k to build controls | Override rate is 13 percent; raising the ceiling before that settles imports the error into production. | rejected on evidence |
| Move the exception tail to the spine | $1187k transition | Loses local context. Rework risk on the cases that are hardest to recover. | under review |
Policy register
The rules the agents above are bound by. Version, owner, approver, and the agents each rule constrains.
| Ref | Rule | Scope | Owner agent | Approved by | Version | Status |
|---|---|---|---|---|---|---|
| IT2-POL-200 | Identity & Access Decision Envelope Agents in this lane may act without a human when the access request sits inside the stated value, risk and confidence envelope. Outside it, the unit holds at a gate with a named approver and a running clock. binds 5 agents · Global · EU | envelope | Duty Conflict Agent | Director, Identity & Access Management | v2.2 | Active |
| IT2-POL-201 | Identity & Access Evidence Standard Every autonomous decision writes inputs, the rule version applied, the model and prompt version, the output and a reversal path. An action with no evidence record is treated as a control failure, not a fast decision. binds 5 agents · EU · UK | evidence | Duty Conflict Agent | Director, Identity & Access Management | v1.6 | Active |
| IT2-POL-202 | Identity & Access Escalation Rule Escalation is mandatory when confidence falls below the floor, when two options sit inside the confidence band, or when a break condition on a ratified position fires. Director, Identity & Access Management owns the response clock. binds 5 agents · EU · UK | escalation | Duty Conflict Agent | Director, Identity & Access Management | v3.4 | Active |
| IT2-POL-203 | Identity & Access Autonomy Ceiling The ceiling for this lane is 86 on the platform scale. Standard joiner and leaver flows are fully touchless and faster than any human process. Privileged and out-of-role access always requires a named approver and expires automatically. The ceiling is a governance decision, not a technical limit, and only Director, Identity & Access Management can propose moving it. binds 5 agents · Global | ceiling | Duty Conflict Agent | Director, Identity & Access Management | v2.8 | Active |