Control CoreDocs

Start Here

Quick deploy Core Concepts Architecture Installation (Helm / DevOps)

Sample Use Cases

Sample Use Cases AI Access Controls Regulatory Compliance Centralized Authorization Dynamic Context Management

Deploy & Operate

Deployment Overview Kickstart (Docker Compose)Custom / Enterprise (K8s)Tiers & Bouncer billing Control Plane Scaling Multiple Bouncers Network Bouncer Config

Administration

Administrator Guide General Settings Configuration Reference License Management Subscription Management License Enforcement Admin Troubleshooting DevOps Guide

Author Controls

Controls Manager Guide Visual Builder (Wizard)SCCA — AI-Assisted Authoring Actions & Post-Decision Flows Control Scenarios Simulator & Testing Control Templates PBAC Best Practices Rego Guidelines

Connect Data Sources

Overview First Data Source (Quick Start)Attribute Mapping Guide PIP Developer Reference

Observe & Audit

Overview How Logging Works Audit vs Diagnostic Logs Security of Support Remote Troubleshooting Runbook PBAC Operator Playbooks

Security

Security Overview Customer Security Guide Control & Policy Hardening Cryptographic Workload Identity Work ID Configuration SPIRE / SPIFFE

AI Governance

AI Governance Overview AI Gateway AI Gateway Config AI Gateway Troubleshooting Control Core AI Pilot Control Map AI Pilot Management Global Baseline Reference Prompt Security Controls AI Pilot Troubleshooting

Demo Application

Demo Guide Resource vs PBAC boundaries

API Reference

REST API Controls as Code API IDE Integration API Multi-tenancy API Telemetry & License API

Enterprise

Architecture Deploy All Components Deploy Sidecar Configure Controls Repo

Help & Support

Quick Diagnostics Troubleshooting Controls FAQ Abbreviations & Glossary

📌 Workload Identity Configuration

This page has been moved. See Work ID Configuration for configuring cryptographic workload identity.