# Watchlight AI

> Watchlight AI defines and implements Agent Runtime Governance (ARG) for the enterprise. We help organizations govern autonomous AI agents at runtime through identity, authorization, policy enforcement, and observability.

## About

Watchlight AI is an enterprise security and governance company focused on AI agent systems. Founded by Aldo Pietropaolo, a practitioner with 23+ years of enterprise cybersecurity and identity and access management (IAM) experience. Based in Austin, Texas.

Website: https://www.watchlight.ai
Contact: https://www.watchlight.ai/contact

## What Is Agent Runtime Governance?

Agent Runtime Governance (ARG) is the discipline of governing autonomous AI agents at runtime. It covers every action, every delegation, and every tool invocation as it happens. ARG sits between identity infrastructure (IAM) and the agent frameworks that execute work.

Learn more: https://www.watchlight.ai/agent-runtime-governance

## 12 Non-Negotiable Principles for Agent Runtime Governance

Watchlight AI published a governance framework built on 12 principles across three layers:

### Foundations (Principles 1-3)
- Principle 1: Agent Identity Is Mandatory
- Principle 2: Explicit Purpose, Goals, and Intent
- Principle 3: Authority Is Explicit, Scoped, and Time-Bound

### Execution (Principles 4-7)
- Principle 4: Deterministic Control Planes
- Principle 5: Plan-Act-Observe Lifecycle
- Principle 6: Human-in-the-Loop as First-Class Capability
- Principle 7: Agent Runtime Policy Enforcement (ARPE)

### Operations (Principles 8-12)
- Principle 8: Governed Memory and State
- Principle 9: Observability and Auditability
- Principle 10: Safe Failure Semantics
- Principle 11: Tool and Service Governance
- Principle 12: Multi-Agent Coordination

Download the whitepaper: https://www.watchlight.ai/whitepapers/governance-framework

## Advisory Workshops

Watchlight AI offers paid advisory workshops for enterprise teams adopting AI agents:

### AI Agent Security Threat Modeling (1-2 days, $15,000-$25,000)
Map risks including privilege escalation, credential exposure, agent-to-agent manipulation, and uncontrolled tool invocation. Deliverables: threat model, risk summary, recommended controls.

### Agent Governance Readiness Assessment (2-3 days, $20,000-$40,000)
Evaluate governance posture against the 12 principles. Deliverables: gap analysis, maturity scoring, reference architecture, prioritized roadmap.

### Authorization and Runtime Control Architecture (1-2 days, $18,000-$30,000)
Design agent identity, scoped authority, delegation chains, and runtime policy enforcement. Deliverables: architecture blueprint, control model, implementation guidance.

Workshops: https://www.watchlight.ai/workshops
Book a workshop: https://www.watchlight.ai/workshops/book

## Watchlight AI Beacon (Coming Soon)

Watchlight AI Beacon is a purpose-built control plane for Agent Runtime Governance. It provides discovery, authorization, and runtime policy enforcement for AI agents in enterprise environments.

Platform overview: https://www.watchlight.ai/platform

## Blog

Deep-dive posts on each of the 12 principles, AI agent security, and governance architecture.

Blog: https://www.watchlight.ai/blog
RSS: https://www.watchlight.ai/rss.xml

## Key Pages

- Home: https://www.watchlight.ai
- Agent Runtime Governance: https://www.watchlight.ai/agent-runtime-governance
- Workshops: https://www.watchlight.ai/workshops
- Platform: https://www.watchlight.ai/platform
- Blog: https://www.watchlight.ai/blog
- Whitepapers: https://www.watchlight.ai/whitepapers
- FAQ: https://www.watchlight.ai/faq
- About: https://www.watchlight.ai/about
- Contact: https://www.watchlight.ai/contact