Batch Reviewer
ActiveTarnbrook Financial Group
Reviews batches of client records on the workload domain and annotates exceptions.
Software
| What | Where it comes from | State | |
|---|---|---|---|
| Release 1.3.0 | read from the signed release record from Tarnbrook Financial Group | Verified | |
| Artefact digest | the estate declaration | Declared | |
| SBOM | the estate declaration | Declared | |
| Build provenance | the estate declaration | Declared |
Authority
The authority granted these roles to the identity created from this entry.
| Role | What the declaration says it is for | Who decides | State |
|---|---|---|---|
tarnbrook.agent.member |
The mark every Tarnbrook platform requires at admission. | Tarnbrook Financial Group decides | Active |
tarnbrook.auth.attested |
Sets the method for attested agents. The value was accepted by the allow list on 9 September 2026 (verification row 3). | Tarnbrook Financial Group decides | Active |
tarnbrook.records.reader |
Read envelope. | Tarnbrook Financial Group decides | Active |
tarnbrook.resource |
The mark the agent runtime requires before it calls a resource it discovered. No rows: Connect offers no oauth_resource policy bucket. | Tarnbrook Financial Group decides | Active |
tarnbrook.review.actor |
Token exchange, for handing on authority a caller presented, narrowed. Held by an agent that serves an API. | Tarnbrook Financial Group decides | Active |
Deploy agent
LiveDeploy requests a governed identity for this agent. Tarnbrook asks. The authority decides what it can do.
What Raidiam Connect will create, and what the authority will publish:
- SoftwareFetch the release record from the publisher and check its signature
- IdentityCreate a governed agent identity in Raidiam Connect
- Authority approvalTarnbrook Financial Group decides the envelope
- PublishConnect publishes the identity so your platforms resolve it
A control on this screen that writes changes a real record in Raidiam Connect.
What a deployment writes
A deployment creates a software statement, which is the record Raidiam Connect holds for the agent. It then asks the authority for each role the entry requests, and publishes a signed document that names the agent and its keys.
A deployment has run for this entry. The Technical tab carries the identifiers, the keys and the signed documents it produced, and the Activity tab carries when it ran.
This entry today
ActiveA governed identity exists for this entry. Stopping a running copy leaves it alone.
- Identity
batch-reviewer- Accountable owner
- Imogen Falk, Head of Operations Automation
- Environment
- Workload
- Assurance
- Attested
- Roles
- 5
- Running copies
- Not read