The Global Centre for Risk and Innovation (GCRI)
Nexus Foundry is the technical work environment of the Nexus Consortiums, and its public gateway is published by The Global Centre for Risk and Innovation (GCRI). AI agents and automated tools can be useful in that environment only if they act within limits that people set, record and can stop. This page explains which tool actions agents are designed to be permitted, how agents and models are evaluated before they receive authority, and the boundaries that apply to every agent action. The current service level is R0: information and enquiries.
GCRI · Established · service level R0
AI agents in Nexus Foundry are automated tools that may act only within limits that people set, record and can stop. The page explains which tool actions agents are designed to be permitted, how agents and models are evaluated before they receive any authority, and the boundaries that apply to every agent action.
Urban demand centres and the hubs that anchor digital and data infrastructure, shown for Southeast Asia as an example geography for this subject.
In the design of the Nexus Sovereignty Framework (NSF), every agent and tool holds an authority record that states its purpose, the tools it may call, the data classes it may touch, its rate limits and its kill-switch. Requests without an explicit policy decision fail closed, including agent and tool calls.
An agent calls only the tools and reads only the data its record names, inside one authorized project.
Agent actions pass the same policy gates and receive the same receipts as human actions.
Scopes, limits and kill-switches are enforced at the gate, not left to the agent's own configuration.
In research work in Labs, agents may run analyses and draft artifacts, but each action is bound to an agent identity, its configuration, model, tool set, budget and supervising institution, and it remains an assertion until a person reviews it. In Studio, agent behaviour inside a composition is declared with its purpose, tools and scope, and the trust spine enforces that scope at runtime.
Integrations and agents are tested against their declared contracts before they receive authority in any tenant.
Promotion of a model requires evaluation records, including red-team results where the use calls for them.
No tenant data is used for training without a recorded decision by the data owner.
Agent outputs used in evidence, reports or decisions are reviewed and attributed to the people who accept them.
Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.
| Term | Definition |
|---|---|
| AI agent | An AI system that pursues goals by planning and taking actions with some autonomy. |
| Human oversight | Review of automated decisions by people with the authority and information to change them. |
| Excessive agency | Granting an AI system more permissions or autonomy than its task requires, an OWASP risk category. |
| Kill switch | A control that halts an agent's actions immediately when triggered. |
Public questions about responsible AI are taken up on GCRI responsible technology, and by The Global Risks Alliance (GRA) for financial services at GRA AI and models.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.