Use this page when a term in the console, the client output or these docs needs a precise meaning. Product names, verdicts and modes keep their English form in every language.
| Term | Meaning |
|---|
| Agent Autonomy Zone | The operating envelope an organization defines for its AI agents: what an agent may do, under which conditions, and with which consequences accepted. Short form: Autonomy Zone |
| Dimension | One of the five sides of the Autonomy Zone: Quality, Economics, Security, Safety and Compliance |
| Effective zone | The one zone an agent resolves to. A unit of your organization without its own zone inherits the nearest one above it |
| Intent policy | A rule that states what your organization means, rather than every surface an agent might use |
| Agent Intent Policy (AIP) | The form an intent policy takes in OpenLatch: a set of intent atoms, compiled to deterministic rules. See the AIP reference |
| Intent atom | One clause of a policy, held in fixed fields (who, does what, to what, only if, unless) from which a sentence and test cases are generated |
| Ratification | The policy owner’s Yes or No on an atom’s sentence, with its test cases shown beside it |
| Mode | How a policy runs in a zone: Disabled, Monitor or Enforce |
| Disabled | A mode in which the policy is kept but not evaluated |
| Monitor | A mode in which a match is recorded and flagged, and the action proceeds |
| Enforce | A mode in which the verdict is applied before the action runs, wherever an adapter covers it |
| Term | Meaning |
|---|
| Verdict | The decision a policy returns for a covered action, before it runs: Allow, Ask, Block or Optimize |
| Allow | The action proceeds unchanged |
| Ask | The action is allowed and flagged for review by default. It is held for approval only on a per-atom opt-in for an irreversible action |
| Block | The action is prevented before it runs, and the agent is told why |
| Optimize | The action takes a different path, through an Optimize lever |
| Optimize lever | One way Optimize changes an action. In Enforce a lever acts where it is shipped; in Monitor it only measures what it would have done |
| Anomaly | An agent action that violates an intent policy of one of the zone’s dimensions |
| Deterministic | A verdict produced by an explicit policy, so the same action in the same context always gets the same verdict |
| Term | Meaning |
|---|
| Sanctioned agent | An agent your organization has approved and connected to OpenLatch |
| Control level | How much OpenLatch controls an agent: Enforced, Monitored or Known |
| Enforced | A control level: an OpenLatch adapter sits in the agent’s execution path and applies verdicts |
| Monitored | A control level: the agent’s actions are visible and its anomalies recorded, but verdicts are not applied |
| Known | A control level: the agent is identified and classified, with the limits of control stated |
| Command plane | The actions an agent takes through its tools: commands, file changes, tool and server calls |
| Request plane | The requests an agent sends to its model provider |
| Execution graph | The record of what an agent did in a session: model calls, tool calls, commands, file changes, data access and cost, in order |
| Evidence record | What OpenLatch keeps for each decision: the action, the policy, the mode, the verdict and whether it was enforced |
| Term | Meaning |
|---|
| Client | The OpenLatch program installed on each machine where agents run |
| Daemon | The client’s background process, which receives each agent event and decides it |
| Hook | The entry point an agent calls before and after each action, which hands the action to the daemon |
| Policy bundle | The integrity-checked file of rules the client fetches from the platform and keeps on disk, so it keeps deciding with the network unplugged |
| Model relay | A local listener the client points each agent’s model calls at, so the request plane is recorded |
| Outbox | The local queue where the client keeps events until the platform has received them |
| Supervisor | The operating-system service (launchd, systemd or Task Scheduler) that starts the daemon at login and restarts it |
| Configuration plane | The agent configuration files the client watches for changes |
| Error code | A code such as OL-1002 that the client prints with a problem. Each one has its own page, listed in the CLI reference |
| Term | Meaning |
|---|
| Platform | The OpenLatch service where you define zones and policies and review what agents did, reached in the console at app.openlatch.ai |
| Console | The platform’s web interface |
| Organization | Your company’s account on the platform, which holds its units, zones, policies and agents |
| API key | A credential that lets the client or a script act for your organization on the platform |