Follow a document request through approval.

Step through the scope check, a blocked export, model execution, and human review. Illustrative workflow using synthetic data. This demonstration does not connect to a live customer system.

A permitted request passes an open gate. An unapproved request meets a closed gate and returns.Permission checks

The document-review example below includes a deliberately denied upload.

Illustrative workflow using synthetic data
Workflow exampleIllustrative workflow using synthetic data

Follow a
document review.

An analyst requests a summary of policy changes. Step through the permission check, a blocked upload, and the review of the finished draft.

POLICY DOCUMENT REVIEW
Request captured

Compare three policy documents.

An operations analyst asks for a summary of policy changes, with a reference for each finding. The agent may read the three selected documents but cannot edit them.

Permission
Read three approved documents
STEP 1 OF 6
Approved policy folderAT-1042
Three source documents3 files
Previous policy

Access policy 2025.pdf

Review access within 10 working days.

Updated policy

Access policy 2026.docx

Review access within 5 working days.

Supporting notes

Review notes.docx

Assign the review to the IT lead.

Your request

“Compare these policies. Show what changed and cite the source.”

Operations analyst
Scope allowed

Check the task against its permissions.

The harness’s security plane checks the task before work begins. Reading the selected folder and using the local model are permitted. Editing the originals or uploading them to another service is outside that scope.

Permission
No source edits or external upload
STEP 2 OF 6
Approved policy folderAT-1042
Access policy 2025.pdf
Access policy 2026.docx
Review notes.docx

The security plane checks scope

Read these three filesAllowed
Use the local modelAllowed
Edit the originalsDenied
Upload to another serviceDenied
Read-only access granted. Original files stay unchanged.
Upload denied

The route fails its policy check.

The agent requests an external upload. It enters the harness’s communication lane, where the shared security plane checks the destination and denies the route. The files stay inside. Monitoring agents watch traffic and policy activity 24/7.

Permission
The destination must be on the approved list
STEP 3 OF 6
Velociti harnessAT-1042

One security plane

Enforces policy on all incoming and outgoing communications.

Destination ruleApproved routes only
DENY
Communication laneIN / OUT
Source filesUnapproved endpoint

Route denied. Source files stay inside.

Monitoring agents24/7
Watch communicationsOutbound upload observed
Watch policy decisionsDenied route recorded
Recorded action

UPLOAD Access policy 2025.pdf BLOCKED

Continue through the lane to the approved local model.

Draft prepared

Prepare the draft with the local model.

The agent summarizes the documents using the configured local model. It attaches source references so the reviewer can check the findings.

Permission
Read-only source access
STEP 4 OF 6
Approved policy folderAT-1042
Local modelCompare text · retain source references
Access policy 2025.pdf
Access review / § 2.1

Review period

Review access within 10 working days of receiving a request.

Responsible owner

The operations coordinator completes the review.

1 / 3
Access policy 2026.docx
Access review / § 2.1

Review period

Review access within 5 working days of receiving a request.

Responsible owner

The IT lead completes the review.

1 / 3
Review notes.docx confirms the IT lead as owner.
Draft findings

1 Review window shortened from 10 to 5 working days. [§ 2.1]

2 Responsibility moves to the IT lead. [§ 2.2 + notes]

Owner reviewing

Check the findings before accepting them.

The workflow owner compares the draft with its sources, requests corrections where needed, and decides whether to accept it. The review notes stay with the task.

Permission
No automatic external publication
STEP 5 OF 6
Approved policy folderAT-1042
Draft for your review

Policy change summary.docx

DRAFT

Two changes to check

1

The review window is now five days.

Access policy 2026.docx · § 2.1
2

The IT lead now owns the access review.

Access policy 2026.docx · § 2.2 · Review notes.docx
Check the source wording
“Review access within 5 working days of receiving a request.”Access policy 2026.docx · § 2.1

You’re the reviewer. Would you make the timeframe more precise?

The draft waits for your decision.

Record retained

Keep the summary and its review history.

The accepted summary is stored with its sources, permission decisions, and review notes. The agreed retention plan determines where the record lives and how long it is kept.

Permission
Agreed storage and retention policy
STEP 6 OF 6
Review archiveAT-1042
Review record / AT-1042

Policy review, with its history.

Example record

Policy change summary.docx

Review window: five working days. Owner: IT lead.

Sources linked2025 PDF, 2026 DOCX, and review notes
Permission checksRead allowed · original edits denied
External uploadSecurity plane denied route · monitoring agents observed
Local comparisonTwo changes found, with references
Reviewer decisionSummary and review notes kept together
Revisit the document comparison

What to look for in the walkthrough

Approved work

A user requests a summary from an allowed source. The workflow checks its scope, uses the configured model route, and prepares a draft.

Denied action

An attempted export to an unapproved destination is blocked in the example. The explanation identifies which permission is missing.

Human decision

A reviewer inspects source references and the output before marking it ready for the next business step.

What the example can tell you

Use it to identify questions for your own deployment, such as which sources a user can retrieve or who approves an export. The synthetic records show the types of information you might retain. They do not establish performance or verify controls in your environment.

Test the same questions in your environment

A setup review starts with your systems and requirements. A scoped pilot can then test approved examples, examine actual execution records, and demonstrate the configured controls. Genuine product evidence should be reviewed in that specific context.

Have a workflow in mind?

Tell us what it involves and which systems it uses.

Request an AI setup review