Guides / Overview
Guides
Plain-language guides to human oversight, governance platforms and regulatory compliance for teams starting to govern AI agents.
This page describes AAES Govern’s controls. AAES Operate has private-work permissions, operational reviews and recorded-spend limits; it does not include Govern. About AAES Govern
Start here
- AI agent control evaluation kit
Reuse a 14-test checklist and procurement questions with any implementation. Reproduce a separate synthetic export-integrity exercise with the public verifier.
- AI governance platform: what to evaluate
Identify which parts of AI governance a product covers, then test its permissions, approvals, budgets, monitoring, and records.
- Human-in-the-loop AI: examples and patterns
What human-in-the-loop AI means in machine learning and in production agents, with examples of approval patterns and when human-out-of-the-loop is acceptable.
- AI regulatory compliance: a practical guide
What AI regulatory compliance asks of teams running agents, what AI compliance software can and cannot do, and how evidence records support an audit.
Implementation
- AI agent access control: permissions and approvals
Decide who an agent acts for, which actions it may take, and who must approve them. Use a worksheet to test permissions and bypass attempts.
- MCP security: a deployment checklist
Connecting to an MCP server does not authorize every action it offers. Check credentials, permissions, approvals, and retries before deployment.
- The capability library
Browse 95 reviewed application packages and 13 in review. Inspect actions, risk tiers, setup requirements, and provider sources.
- AI agent spending controls: patterns and tools
Distinguish tracking costs from refusing spending requests. Test budget reservations, concurrent requests, retries, and differences between authorized amounts and provider invoices. The guide also outlines project spending limits in AAES Infer.
Comparisons
- Comparing AI agent governance approaches
Compare Microsoft, Google, AWS, ServiceNow, IBM, and AAES on action controls, credentials, and records. Each vendor claim links to a dated source.
- Comparing native agent control planes
Compare AAES with Microsoft, Google, and AWS across credentials, approvals, budgets, evidence, packages, deployment, and accountable agent identities.
- Enterprise AI governance platforms: a comparison
Compare the governance functions offered by IBM, Credo AI, Holistic AI, OneTrust, ServiceNow, and AAES. Build an evaluation around the controls your organization needs.
Choose a starting point
Start with the governance evaluation guide to map your control requirements. Use the human oversight guide to design approvals, the spending guide to test budget limits, and the compliance guide to prepare evidence for your reviewers.
These guides are educational. They describe general practice and, where relevant, how AAES approaches the topic. They are not legal advice or a certification.