Preview before write Diffs, policy posture, and rollback readiness appear before the connector executes.
Simulation or sandbox first The product starts with a deterministic story before it asks for production trust.
Proof stays attached Approval, audit, artifacts, and recovery context stay on the same governed run.
Architecture

Architecture for governed AI writes.

ActionPlane is designed to sit between AI runtimes and systems of record. Cloud services provide identity, compute, queueing, storage, and secrets. ActionPlane adds preview, policy, approvals, execution control, recovery, and audit on top of that substrate.

Three layers
01
Application layer Identity, governance, approvals, queues, persistence, and user-facing review tools.
02
Execution plane Managed connector adapters that carry out approved writes against cloud and SaaS systems.
03
Evidence plane Artifacts, audit, replay, and recovery context attached to the same governed run.
Your stack
What remains in the customer cloud

Identity and enterprise authentication

API gateway and secure connector exposure

Queueing and background execution

Secrets, storage, telemetry, and monitoring

Managed execution paths for connectors

ActionPlane
What the product adds above that substrate

Change preview and simulation semantics

Connector-aware policy and approval routing

Rollback posture and compensation workflow

Artifacts, audit evidence, and operator review context

Console and Reliability Lab on the same run model

Run path
How a governed write moves through the system
01
Submission

An operator or AI runtime proposes a business-system change through ActionPlane.

02
Preview

ActionPlane builds the change plan, impact summary, and execution posture.

03
Policy

The run is evaluated against connector-aware policy, confidence, and approval requirements.

04
Execution

Approved writes move through managed connector adapters instead of direct unmanaged calls.

05
Evidence

Artifacts, audit, Console state, and replay metadata bind to the same run record.

06
Recovery

Rollback posture and compensation remain available if the workflow needs recovery.