AGT-1042 · Onboarding

KYC Verification Agent

Extracts and validates identity documents against CKYC records.

high riskcompliant

Trust score

88

grounding, fairness, oversight

Requests / 30d

41,789

model Azure Doc Intelligence

Human approval

Not required

data class Confidential

Last audit

2026-05-09

version v3.6

Agent architecture

Request path from the surface the customer or staff member touches, through the governance gateway, to the model and its wired systems

Entry surfaces

Contact Centre Desktop

 

Business application · Genesys

Governance gateway

Truint policy enforcement point

9-stage filter chain · p99 54 ms

Evidence ledger writer

Hash-chained, RFC-3161 anchored

Agent runtime

KYC Verification Agent

AGT-1042 · v3.6 · trust 88

Azure OpenAI · gpt-4.1

 

LLM / model endpoint · Central India

Tools & data

payments.transfer

 

Tool / function · Restricted

Bureau feed (CIBIL)

 

Data source · Restricted

Enforcement chain on every request

  1. 1Identity & entitlementCaller identity resolved; agent entitlement checked against the registry record.
  2. 2Kill switchEstate and per-agent revocation state for AGT-1042 evaluated before any spend.
  3. 3Manifest checkOnly integrations on the signed manifest below are reachable.
  4. 4Budget & rateToken, cost and concurrency budgets for Onboarding.
  5. 5Injection screenPrompt and retrieved context screened for untrusted-content patterns.
  6. 6DLP & maskingConfidential payloads masked or tokenised inline.
  7. 7Policy decisionCompiled policy bundle evaluated; allow, warn or block.
  8. 8Human in the loopAdvisory output only — no restricted action is executable.
  9. 9Ledger barrierDecision hash-chained into the audit ledger before the response is released.

Registry record

Source of truth for this agent

Registry ID
AGT-1042
Business owner
J. Pereira
Department
Onboarding
Model endpoint
Azure Doc Intelligence
Version
v3.6
Data classification
Confidential
Human-in-the-loop
Advisory output only

Trust composition

Grounding & citations92
Fairness82
Security posture90
Oversight coverage78

Wired integrations

Signed manifest — nothing else is reachable

Azure OpenAI · gpt-4.1connected

LLM / model endpoint · Microsoft Azure · scopes chat.completions, embeddings

Contact Centre Desktopconnected

Business application · Genesys · scopes copilot.suggest

Bureau feed (CIBIL)connected

Data source · TransUnion CIBIL · scopes report.pull

payments.transferdegraded

Tool / function · Payments hub · scopes mt103, neft, rtgs

Policies in force

POL-001 · No customer PII outside IndiaPOL-004 · No customer data sent to public LLMPOL-005 · High-value transaction requires human approvalPOL-006 · PII masking requiredPOL-009 · Toxicity detection

Recent decisions

Live gateway stream filtered to this agent

11:39:01emp-20663allow

Extract PAN and Aadhaar from the uploaded onboarding pack.

POL-006 · PII masking required · risk 25 · 961 ms

11:37:07emp-20029allow

Extract PAN and Aadhaar from the uploaded onboarding pack.

POL-006 · PII masking required · risk 10 · 338 ms

11:34:23emp-20847allow

Extract PAN and Aadhaar from the uploaded onboarding pack.

POL-006 · PII masking required · risk 7 · 480 ms

Open risks

Drill into the investigation

Aadhaar patterns in vendor-bound payloadshigh

RSK-4401 · Data leakage · SLA 6 days

Ledger entries

Hash-chained decision records

Blocked at egress

AUD-918439 · 2026-07-26 11:40:58.310

Governance obligations

  • Quarterly attestation by J. Pereira under MB-04
  • Advisory output only — no autonomous execution of restricted tools
  • Kill switch tested; revocation propagates in under 30 seconds
  • Evidence retained ten years for regulator inspection