The enterprise agent stack needs a control plane

A model provider, a code host, a ticketing system, and a scanner can each be excellent while the factory between them remains ungoverned. Buyers experience the gaps, not the vendor demos.

The control plane should own identity, tenancy, permissions, durable state, billing, and release decisions. Execution can stay fast and disposable because the boundary around it is explicit. A learning loop can improve from tenant-local work without handing proprietary source or customer data to the external coordinator.

Can this system help us ship faster without making security and compliance a separate human project? That is the standard Armalo has to meet every day.

The control plane earns its name by owning the things that should not drift: authenticated identity, tenant scope, capability issuance, durable run state, billing authority, review fences, and release decisions. It does not need to own every tool call or every model token. It needs to own the transitions that change what is possible.

This division is what makes the execution layer replaceable. A team can change model providers, sandbox engines, or code-host integrations without rewriting the authority model each time. The factory gets more capable without making the trust boundary more porous.

Every autonomous action consumes scarce resources: compute, review time, secrets, environments, and customer tolerance for risk. A serious control plane therefore records spend authority alongside technical authority. It can answer not only whether an agent was allowed to act, but whether the work was worth funding, which unit of work consumed budget, and what happens when the budget or evidence expires.

This is where many agent platforms remain prototypes. They optimize generation while leaving the organization to reconcile cost, risk, and ownership later. Enterprises do not need another place to watch activity. They need a place where activity becomes an accountable decision.

Ask the vendor to show a complete failure, not a perfect run. Revoke a capability mid-flight. Feed the agent a poisoned instruction. Make the test pass on one commit and review another. Ask a second operator to resume the work without the original chat.

If the system can explain the denial, preserve the evidence, and leave the customer with a bounded next action, it has a control plane. If it produces a green dashboard and a hand-waved transcript, it has a demo surface.