One Control Plane. Every Agent Action Governed.
Watchlight AI Beacon sits between your AI agents and the systems they act on. Every action passes through the same gate: discovered, authorized, enforced, and recorded, in real time, at the moment it happens.
Agents from any framework on the left. Your systems and data on the right. In between, Beacon governs every action so nothing reaches a resource unless policy allows it.
The Lifecycle of a Governed Action
No action is trusted by default. Each one runs the same four steps before it can touch a resource. Each step is a capability you can explore in depth.
Discovery & Registry
“What AI agents do we even have?”
Beacon continuously discovers every AI agent and MCP server running across your environment, then registers, classifies, and tracks the trust state of each one. You cannot govern what you cannot see, so visibility comes first.
Explore SeeAgentic Policy Decision Point
“Is this agent allowed to do this, right now?”
Before an action runs, Beacon evaluates it against current policy: the right agent, an approved purpose, and authority that is explicitly scoped and time-bound. No blanket, always-on access and no standing privilege.
Explore AuthorizeRuntime Enforcement Proxy
“What actually stops a bad action?”
Beacon sits transparently between the agent and the resource and blocks anything outside policy before it executes, with content safety, guardrails, and granular kill switches at the agent, group, and system level.
Explore EnforceExecution Lineage
“Who authorized this, and what happened?”
Every decision is captured as execution lineage: a tree-structured chain from the human who authorized it, through each delegation hop and policy decision, down to the resource it touched. Reconstruct any chain from a single ID.
Explore RecordOne Plugin Per Framework. One Governance Plane.
Enterprises never standardize on a single agent framework. Beacon meets every team where it is: a drop-in plugin for each framework, all reporting to the same policy engine and the same audit trail, with no agent code changes.
LangGraph
Full lifecycle: Plan, Act, and Observe
Google ADK
Full lifecycle: Plan, Act, and Observe
AWS Bedrock Agents
Act and Observe enforcement (Bedrock exposes no external plan stage)
MCP servers
Act and Observe enforcement at the tool boundary
Microsoft Agent Framework
Observe-stage lineage today; Plan and Act enforcement on the roadmap
Custom / in-house agents
Full lifecycle via a documented integration contract
Defense in Depth: Plugin and Proxy
The plugin layer and the enforcement proxy catch different evasions. For high-risk agents, run both: an unauthorized action must clear both layers to proceed.
Plugin Layer
Enforces at the semantic layer, where it sees the agent's declared intent and the framework's lifecycle events. This is the only layer that can authorize a plan before any action runs.
Enforcement Proxy
Enforces at the wire, where it sees every outbound request regardless of the code path that produced it. An agent that bypasses framework instrumentation, through a spawned subprocess or an unapproved HTTP library, still cannot escape the proxy.
What Makes It Deployable
The same governance extends to the frameworks your teams already run, on a deterministic engine that can operate with no outbound connectivity.
Cross-Framework Consistency
A research agent on LangGraph and a production agent on Google ADK enforce the same policies, produce the same event shape, and feed the same compliance dashboard. One governance plane, whatever runs underneath.
Cedar Policy Engine
A deterministic policy engine evaluates every action against formal, versioned rules. Decisions are consistent and explainable, not left to the interpretation of the model being governed.
On-Prem & Air-Gapped
Because Cedar evaluates every action locally, Beacon runs fully on-premises, including air-gapped environments with no outbound connectivity. The most sensitive deployments never depend on a vendor cloud.
What This Architecture Delivers
See the Control Plane in Action.
Walk through how Beacon governs a live agent action, from intent to enforcement to lineage.