Infrastructure layer

The Agent
Registry

The CAO framework tells you what to govern. The Agent Registry is how you govern it — the system of record for every agent in your organization, platform-agnostic and built for accountability from day one.

Agent Registry — Live view 5 active · 1 safe-held
Agent Domain Rung Status Cost / run
research-01 Market intel R2 · Supervised Active $0.012
workflow-crm Sales ops R3 · Conditional Active $0.034
classifier-support Customer ops R3 · Conditional Drift detected $0.008
executor-finance Finance R5 · Autonomous-Critical Safe-held $0.091
cao-orchestrator Governance R4 · Autonomous-Bounded Active $0.047
01

What is the Agent Registry

Not a dashboard. Not a monitoring tool. A system of record — the authoritative source of truth for agentic operations.

The Agent Registry is to agents what the general ledger is to finance — the single authoritative record that everything else depends on.
Pillar 01

Inventory

Every agent registered before it acts. Owner, domain, purpose, permissions, ladder rung, safe-hold point, gate dispositions, version, and current status — one source of truth for what exists in your ecosystem.

Pillar 02

Governance

Policy enforcement at the agent level. Action limits, data access scopes, behavioral thresholds. Not configured after deployment — defined before an agent is allowed to run.

Pillar 03

Observability

Continuous metrics per agent: task success rate, cost per run, latency, error rate, human escalation ratio. The CAO's operational dashboard for the agent portfolio.

Pillar 04

Audit

Immutable append-only log of every run, action, and decision. When something goes wrong — and eventually it will — you know exactly what happened and who was responsible.

Pillar 05

Security & privacy

Per-agent PII handling policies, sensitivity ceilings, and data access scopes enforced at runtime. Compliance-ready for EU AI Act, NIST AI RMF, GDPR, and sector-specific regulations.

Pillar 06

Marketplace

A private, governed catalog of vetted agents available to your organization. Deploy with confidence — every agent in the marketplace is pre-registered, pre-audited, and policy-compliant.

02

Architecture

Platform-agnostic. Integrates with your existing agent infrastructure regardless of framework or cloud.

Layer 4

CAO Interface

Executive dashboard for the Chief Agentic Officer. Portfolio-level view: health, cost, risk flags, compliance status, and weekly reports generated by the CAO-Agent orchestrator.

Portfolio dashboard Risk alerts CAO-Agent reports Governance controls
Layer 3

Agent Registry API

The core system of record. REST + event-driven API that any agent — regardless of framework — uses to register, report runs, log events, and check policy compliance before acting.

POST /registry/register POST /registry/run GET /registry/policy POST /registry/alert
Layer 2

Data layer

Append-only audit store, time-series metrics, and policy configuration. Designed for high-write throughput and immutable record-keeping. Queryable for compliance reporting and forensic analysis.

Cloudflare D1 Vectorize BigQuery Firestore
Layer 1

Agent integrations

SDK and webhook connectors for any agent framework. Agents report runs and check policy without changing their core logic — the Registry integrates at the boundary, not inside the agent.

Google ADK LangGraph CrewAI OpenAI Agents Custom

Platform-agnostic by design. The Agent Registry does not care what framework your agents use, what cloud they run on, or who built them. Any agent that can make an HTTP call can integrate. This is intentional — governance infrastructure must work across the entire ecosystem, not just within a single platform.

03

Implemented by Agennect

Agennect is the platform that brings the Agent Registry to production. Three products, one ecosystem.

The Agent Registry is an open specification. Agennect is its reference implementation — a platform built specifically for organizations that take agentic governance seriously. Three products, designed to work together and independently.

Advisor

Agentic C-Level Advisor

A multi-agent system that monitors the AI activity of each C-Level function in a startup — CTO, CMO, CFO, CPO — and emits weekly recommendations aligned to investor guidelines and portfolio philosophy.

  • Per-function agent monitoring (CTO, CMO, CFO, CPO)
  • Benchmarks against industry best practices
  • Investor-aligned recommendations
  • Weekly executive report, fully automated
  • Designed for accelerators, VCs, and angel portfolios
  • No internal access required — external signal only
04

The CAO Generator

The framework as a callable function — listed on Agennect, and callable by your own agent over A2A.

The generator drafts; it never signs. Governance authority stays human.

The CAO Generator turns an organization's context into the framework's artifacts: the readiness score and its band, an org-model recommendation, a mandate charter draft, an autonomy-ladder configuration, and the five-layer policy set. Each output names the human role that must approve it before it has force.

Path A · Agennect UI

Invoked from the marketplace

The generator is listed on agennect.com and invoked directly. The requester supplies context through the interface and receives the artifact set. This is the path for an organization discovering the framework.

Path B · Client agent over A2A

Invoked by your own agent

A client's own agent calls the CAO Generator over A2A, passing context and receiving artifacts as structured output. This is the path for an organization already running an agent ecosystem that wants governance artifacts generated in-flow, without a human leaving their environment.

Both paths produce identical artifacts. The difference is only who holds the session — a human at Agennect, or a client agent acting for one.

The generator is itself governed

It carries its own ladder rung, its own security gate, and its own responsible owner, registered like any other agent in the Registry. Its autonomy is deliberately capped: it drafts, it never signs. Every output requiring sign-off is labeled DRAFT and names the approving role. Where a jurisdiction prohibits a requested autonomy level, the generator says so and refuses to generate it as approved.

A framework that governs agents cannot exempt its own.

The record types, as schema

The Registry's three record types are published as JSON Schema (Draft 2020-12), so any registry — yours, ours, or a third party's — can validate against the same contract. The schema encodes the rules, not just the fields: a Rung 4+ agent record without a declared safe-hold point fails validation.

thecao.io/schema/v2/draft 2020-12
registry.schema.json   bundle — $defs: agent, run, event
agent.schema.json      earned_rung, effective_rung, safe_hold_point, gate_dispositions
run.schema.json        containment_state, decision_completed
event.schema.json      breach / containment / demotion, gate_refs
05

Who it's for

Three distinct audiences. One shared need: knowing what their agents are doing.

Audience 01

Organizations with agents in production

You have AI agents making decisions today. You don't have a unified view of what they're doing, what they cost, or who is accountable when something goes wrong. The Agent Registry fixes that.

"Finally, one place where I can see every agent we're running and what it's actually doing."

Audience 02

Accelerators & venture funds

Your portfolio companies are deploying agents without governance. You can't see it, you can't advise on it, and you can't report on it. The Agentic C-Level Advisor gives you visibility without friction.

"I know what the CTO is building. Now I also know what the agents are doing."

Audience 03

AI architects & platform teams

You're building the agent infrastructure. You need a governance layer that works across frameworks, doesn't slow down development, and gives the business the audit trail it needs. The Registry API is designed for you.

"I don't want to build governance from scratch. I want to integrate it in an afternoon."

Early access is open

Agennect Enterprise and the Agentic C-Level Advisor are in early access. We're onboarding organizations and funds that want to shape the governance standard before it becomes the industry default.

01
Organizations with active agent deployments 10+ agents in production, governance gap identified
02
Accelerators & VC funds Portfolio of 5+ startups with AI initiatives
03
AI platform teams Building multi-agent infrastructure, need governance layer