Guardrails

Residion ships control mappings (for example PDPA / EU AI Act / OWASP-LLM) as documentation. That is not certification, compliance attestation, or accreditation.

What you may say operationally

• Audit trail and agent journal can be viewed and exported from the Operator Console.
• Read-only auditor is enforced server-side (403 RES-ADMIN-403 on mutations).
• Sovereignty properties are architecturally enforced and locally test-proven — not certified.

What you must not claim from these docs

• “Certified”, “compliant”, or “accredited”
• Inflated guardrail effectiveness (for example “100%” injection defence)
• PII detection beyond the honest scope: structured identifiers at ~70% recall (improvable)
• Retrieval quality on your customer data — published figures elsewhere are public-benchmark proxies only
• Any throughput or latency SLA

Agent budgets

Budget controls are set under Governance (PUT /v1/admin/agent/budgets). Use them as operational limits, not as a compliance certificate.