DISCINTELUSER GUIDE

DISCINTEL Governed AI Workspace

User guide: how to decide what your AI may do, require approval where it matters, and keep evidence of every action.

Updated October 21, 2026 · Early access

What changed on 21 October: a new section on Legal Intelligence, whose drafts now link every source they cite; the retrieved address in Research is a link too. Regulatory context, the language menu, Handoffs and agent revalidation are described, with matching troubleshooting entries and glossary terms.

What changed on 15 October: links to the guided tours, in Getting started and the Personal space.

What changed on 14 October: the right panel now shows the context recorded on the action in focus, with the context for new requests beneath it; and in Approvals, a blocked, withdrawn or rejected request shows approvals it never requested as Not applicable.

Open DISCINTEL
The idea in one paragraph. An AI agent should be able to act only within authority that a person granted it, for a specific institution, environment and amount, and only after the approvals your policy requires. DISCINTEL checks each proposed action against that authority before it happens, records the decision, admits the execution once, observes what actually happened, and writes every step to a hash-linked evidence log that anyone can re-verify later.

1. Getting started

Create your account

  1. Go to app.getdiscintel.com and choose Create free account.
  2. Sign up with a passkey (Face ID, Touch ID or Windows Hello) or with email and password. Passkeys are recommended: there's nothing to remember or phish.
  3. Verify your email address from the message you receive.
  4. Choose how you'll use DISCINTEL: Business or Personal. You can open the other one later from the account menu.
Account type chooser with Business and Personal options
After sign-up you pick Business, a governed workspace for an organization, or Personal, a private, device-only profile.
DISCINTEL is free during early access. Features may change as the product develops.

2. The Business workspace

Every Business account gets its own isolated workspace, stored on the server and visible only to that account. It starts with a fictional sample institution, ACME Financial Services, so you can explore safely. Its people, approvers, sanctions list and payment rail are simulated. No real money moves.

  1. On first visit, choose Initialize sample institution. It takes a few seconds and records its own setup in the evidence log.
  2. You act as Olivia Carter, Treasury Manager, a demo persona. The other approvers are simulated colleagues.

Finding your way around

To see the workspace before you use it, the guided tours walk through the real screens one highlighted control at a time. Start with Finding your way around; you can also open them from Your account → Guided tours.

AreaWhat it shows
Left menuEvery screen: Chat & Actions, Dashboard, Agents, Authority & Policy, Approvals, Handoffs, Objects & Data, Tools & Integrations, Executions, Outcomes, TrustDNA Evidence, Inspector, Research, Legal Intelligence, Reports & Assurance and Administration. On a phone, open it with the menu button.
Top barThe institution, the governance domain of the selected agent, and the environment you're working in. Choose the institution name to open Action context, where you pick the environment and the jurisdiction. Also: search (⌘ K or Ctrl K) across actions, agents, policies and evidence; the save status chip (Persisted · Netlify means your records are saved on the server); notifications; the language menu; and your account menu.
Agent selectorAbove the chat. The agent you choose acts for every new request. Your agent, environment and jurisdiction are remembered for your account, so a reload or another device picks up where you left off.
Right panelThe context for the action in focus: consequence class, institution, domain, environment, jurisdiction and policy set as recorded on that action, plus required approvals and recent activity. Under it, New requests use shows the context your next request will get, with Edit to change it. The Selected Agent card is the agent for new requests and says when the action in focus has a different agent or none. With no action in focus, the panel shows the context for new requests.

Environments

The workspace offers two environments, Production and Test. "UAT" means Test. Every action and tool call is checked against three things: the environments the tool allows, the environments of the governance domain, and the environments the agent is registered for. A mismatch is refused, and the refusal names the environment and what doesn't allow it.

Test is a label, not a separate system. Test and Production records share the same workspace, evidence log and sign-in. Use Test to mark and separate your trial actions; don't rely on it to isolate data.

Jurisdictions

Every action takes effect in one jurisdiction, chosen in Action context (US, EU, UK or CN). A payment, claim or purchase order is blocked unless both its tool and its governance domain allow that jurisdiction, and the decision names which one doesn't (for example Jurisdiction EU: Payment Release API is not permitted there (US)). The workspace checks this itself, whatever the runtime governor's mode.

3. A governed action, step by step

This is the heart of DISCINTEL. The sample walks a wire-payment batch through the full lifecycle:

Request→Material evidence→Proposed action→Decision→Approvals→Execution admission→Receipt→Observed outcome→Closed

Step 1: Ask, and attach the material evidence

In Chat & Actions, type what you want done, for example "Prepare the wire transfer for approval for this payment file." The assistant asks for the material it needs. Add it with the + button:

Each file is fingerprinted (SHA-256) when it arrives, and the analysis is labeled informational: reading and summarizing uses no authority. In the sample, the analysis finds 48 payments, screens all beneficiaries, and holds out two exceptions (a duplicate payment and a changed beneficiary account), leaving a clean batch of 46.

The chat understands requests to prepare payments, wires and purchase orders, and questions about sanctions, exceptions, required approvals and policy thresholds, and month-over-month comparisons.

Step 2: Submit for governance evaluation

The assistant turns your request into a proposed action with an amount, targets, principal, agent, tool and requested effect. Choose Submit for governance evaluation. DISCINTEL's decision service checks the proposal against the institution's records on the server, not in your browser, and returns one of four verdicts. Each decision shows that it was issued by the service, and which engine version issued it:

VerdictMeaningWhat happens next
ALLOWWithin the authority already grantedExecution admission can be requested.
ASKAllowed only with human approvalThe required approvers are listed. Execution waits for them.
HOLDNot enough information to decideFor example, no amount identified, no ready material file, or a weak emergency justification. Supply what's missing and re-evaluate.
BLOCKOutside authority or policyThe action cannot proceed as proposed.

The decision lists every check with a ✓ or a note. Examples: the agent is active and holds a grant for this effect; the tool is active and the agent may invoke it (possession ≠ authority: having a tool is not permission to use it for anything); the largest payment is within the per-payment scope; the file is bound by its hash; sanctions screening results; and who must approve.

Governance decision showing ASK, approval required, with a list of passed checks
An ASK decision on the sample batch: $455,900 across 46 payments needs Manager, Dual and CFO approval. The decision is bound to that exact file, agent, tool and environment.

Decisions may also show a Runtime governor (DMGG) line. During early access it runs in shadow mode: its verdict is recorded for comparison (shadow: recorded, not enforced) and never changes the outcome.

Decisions are bound. If anything material changes (the file, the agent, the environment, the tool's status), the old decision no longer applies and a new evaluation is required. Use Re-evaluate against current context.

Changed your mind? A proposed action that hasn't been evaluated has a Discard button. After evaluation, and up to the moment of execution, use Withdraw request: the decision is retired, its approvals and any admission are invalidated, and nothing is executed. An action that is executing or done can't be withdrawn.

Step 3: Collect approvals

The approvals each decision needs come from the institution's obligations. In the sample:

Open Approvals, or the Approvals tab under the chat, and choose Record approval for each pending signature. Signatures are recorded by the server, never by your browser. In the sample, approvers are simulated. Segregation of duties is enforced: the person who requested the action can't approve it.

An approver can also say no. Choose Reject or request changes, give a reason (it's recorded in the evidence), then:

Either way, approvals already given for that request stop counting. A request that is blocked, withdrawn or rejected can no longer reach approval, so any approval it never requested shows Not applicable with the reason, never Will be required. Approvals expire. Each pending approval shows Lapses …: 72 hours after it was requested, unless the institution's obligation sets another period. A lapsed approval can't be signed or used for execution; the decision is retired and the request must be evaluated again.

Reject or request changes dialog with a reason box, Request changes and Reject (final) buttons
The approver's reason is required and is written to the evidence log with the decision.

Step 4: Execution admission, receipt and outcome

Once every approval is recorded, choose Request execution admission. The server re-checks everything (decision still effective, approvals complete, file unchanged, agent and environment unchanged, tool active) and issues a single-use admission bound to the exact request. When the tool presents it, the server validates and consumes it in one step: it works once, expires after five minutes, and any change to the request makes it invalid.

Two things are then recorded separately, on purpose:

Executed action with the Outcomes tab showing a confirmed observed outcome
After execution, the Outcomes tab shows what was independently observed. Here it is CONFIRMED and matches the requested effect.

Step 5: Closure, and what happens when things go wrong

An action closes only when its closure obligations are met: the outcome was independently observed and matches the request, and the evidence trail is complete. The server evaluates closure right after execution and records the result; your browser can't write it. The Execution tab shows Closure · CLOSED · server-evaluated. If an executed action shows Closure · not yet evaluated, choose Evaluate closure obligations there or on the action card.

Try the built-in simulations to see failure handling:

Claim settlements (sample)

The sample institution also has a Claims domain with a Claims Agent that settles property-and-casualty claims through the simulated Claims Payment API. Its thresholds are illustrative, not any insurer's mandate:

Settlement exposureApproval
Up to $10,000None (ALLOW)
Over $10,000Claims Manager
Over $100,000Claims Manager and CFO

Splitting doesn't evade a limit. A settlement is approved on its cumulative exposure: the request plus earlier settlements on the same claim, or to the same payee, in the last 30 days. Three $4,500 settlements on one claim: the first two are allowed, the third needs a Claims Manager, and the decision says so: "Cumulative exposure requires Claims Manager Approval: this request alone ($4,500.00) would not". Withdrawn, blocked and held settlements don't count; pending, approved and executed ones do. A later request never changes a decision already made, but if a held request is re-evaluated, settlements that went ahead in the meantime are counted.

One file pays once. If the same file (the same bytes, even uploaded again under another name) is already bound to a pending, approved or executed request of the same kind, the new request is held: "Same file already submitted … One file pays once; withdraw one of the two requests." Withdraw the one you don't want, then use Re-evaluate on the other. This applies to wire releases too. Different files on the same claim aren't duplicates; they're counted toward cumulative exposure.

Demos and the sample batch. The sample wire batch is one file, so once it has been released, releasing it again is held. For another run, choose + → New sample wire batch: the same 48 fictional payments and planted exceptions, with a new batch reference, invoice numbers and value dates, so it is a new file. Requests that can never pay because their file was already paid are listed under Administration → Requests that can't proceed; Withdraw retires them all through the normal governed withdraw, recorded as evidence.

To try it, choose Claims Agent in the agent selector, upload a settlement file (CSV with claim_id, beneficiary, account_last4, account_on_file_last4 and amount_usd) and send Settle this claim (pay or process this claim works too). Asking for a summary instead gives the file's totals, payees and exceptions without starting a settlement; sanctions are screened in the settlement decision itself. A row whose payee account differs from the one on file is held out; if nothing payable remains, the settlement is held.

Research with evidence

Research in the left menu gathers sources and turns them into claims you can check, without granting any authority to act. Every step runs on the server and is recorded in the evidence log.

  1. Request research authority. Give a title, the purpose the research supports, the source types it may use, and any intended next step. Public web, public documents and pasted text are allowed straight away. The next step (for example PAY) is shown as not authorized: research never authorizes an action; that needs its own governed action.
  2. Add sources. Enter a public URL and choose Retrieve, or paste text and choose Add as evidence. The server fetches public pages only: addresses on private networks, other ports, links with passwords, files over 2 MB, slow responses and anything other than text, HTML, JSON or XML are refused, and every redirect is checked again. Each source keeps its address (a link you can open), size, SHA-256 hash and the runtime governor's verdict, and its text becomes an evidence unit with its own hash.
  3. Record claims. Choose the type (FACT, INFERENCE, OPINION or UNCERTAINTY), write the claim, tick the evidence it rests on and add any limitation. A FACT must quote its evidence word for word (at least 20 characters; spacing, curly quotes and dash styles don't matter). A quote that isn't in the evidence is refused and the refusal is recorded.
  4. Synthesize. The synthesis is built only from accepted claims, with a confidence (the average, less 0.1 per contradicted claim) and its limitations.
  5. Complete research. The server checks the whole chain again (every claim, quote, evidence hash and source hash) before marking it Completed. Changed evidence blocks completion. Completing authorizes nothing.
Completed research with its source, a FACT claim quoting the source, and the synthesis
A completed research: the source's hash and DMGG verdict, a FACT that quotes its source, and the synthesis with its limitation.

Private sources need approval. If you tick Connected private or Sensitive cross-source, the research waits at Authorization required and shows an Access request. A Security Administrator who is not the requester (in the sample, T. Nakamura, simulated) approves or denies it with a reason, within 72 hours. Approving opens those source types for that research only; denying ends it. Private sources are never fetched from the network: paste the excerpt and choose its approved type. The synthesis then says it contains private evidence.

Research awaiting authorization with an Access request card, reason box, Approve access and Deny buttons
An access request for connected-private data, decided by a Security Administrator.

Legal Intelligence in the left menu is a research workspace for legal and regulatory questions. A matter is a research request run by the Legal Intelligence agent: it reads the sources you add, then drafts a research memo and a table that traces each legal provision to a technical control, a test and the evidence you would need. It is a draft for an attorney. It does not file, send, sign or give a final opinion, and it takes no action.

  1. Open a matter. Give a title, write the legal question (the agent stays within it) and tick the jurisdictions in scope: United States (federal), North Carolina, South Carolina, Colorado and the European Union. To try it, choose a demo matter and Fill in.
  2. Add sources. Add public pages and public documents by address, or paste text. The server retrieves each page itself, through the same checks as Research. A demo matter offers Add all for its sources. Confidential client material is outside this version and is never sent to the model.
  3. Run the agent. A draft takes one to three minutes. The agent receives this matter's evidence and nothing else, and the server then checks every proposition before anything is recorded. Run the agent is disabled until a source has been added.
  4. Read the draft. It shows the counts (propositions with a verified quote, unverified, inference, uncertainty), the memo, the traceability table, the gaps found, and any action the agent asked for. Actions are never executed: each is checked against policy and shown as blocked or held.
  5. Check the sources. Sources cited lists every source the draft relies on. Each source is a link to the page the server retrieved, with its standing in the legal source registry and the propositions that cite it. The source of each proposition, and the sources behind each traceability row, are links too. Text you pasted has no public page, so it shows Provided text (no link). Links open in a new tab; check the page yourself before relying on a quote.
  6. Counsel review. A licensed attorney reads the draft against its sources and records a decision with a note: Approve as a draft or Request changes. The attorney's licence is self-attested and recorded; DISCINTEL cannot verify it. Approval accepts the work as a draft for internal use and authorizes no filing, sending or other external action.
What the checks do and do not show. Quote verified means the quote appears word for word in the cited source, and that a statement of law comes from the legal source registry. The wording of the proposition is the model's and is not checked against the quote, so the reviewer reads the two together. Cites verified on a traceability row means it cites at least one proposition whose quote was checked; it does not mean those propositions cover the provision. The memo's analysis is not checked line by line.

Regulatory context

For a decision that takes effect in the European Union or a member state, the decision card shows a Regulatory context line: the DORA and NIS2 events that apply, each with its date, severity and a link to its source. The list comes from a dated, hashed snapshot published by the DISCINTEL core platform, and it shows the snapshot's date; if the snapshot is more than 120 days old the card says it may be out of date. The context never changes a decision's outcome and is not legal advice. A US-only institution, like the sample, has none. In the Inspector, Reconstruct and verify re-checks the context against the recorded snapshot and reports MATCH or MISMATCH.

Language

The language menu in the top bar shows English. Choose Español or Français to show the screens and the guided tours in that language; English stays the base. In Spanish or French you can type a request in that language and chat routes it like its English equivalent. An amount that could be read two ways, such as $10.000, or one that is not in US dollars, is asked about and never guessed. The translations are awaiting native-speaker review, and these guides are in English only.

4. Screen by screen

Dashboard

Your authority posture, computed live from records: governed actions, pending approvals, decisions by verdict, outcome health (executed, observed, matched, mismatched), evidence integrity (chain length, head, link check) and authority surface (agents, grants, tools, revocations). Nothing on it is typed in by hand; every number traces to a record. Recompute hashes now re-verifies the evidence chain.

Dashboard with decision mix, outcome health, evidence integrity and recent governed actions

Agents

Opens a panel listing each agent's purpose, owner, granted tools, environments, authority scope, consequence class and version. An agent's record also shows its Validated version. If the version has changed since, the record says Revalidation needed, and a request with a consumer-facing effect is held until a Security Administrator who is not the requester records a revalidation with a note of what was revalidated (at least 10 characters); an effect that is not consumer-facing gets a warning instead. In the sample, the Security Administrator is simulated. Switching the active agent is a material change: open actions lose their decision and approvals and must be re-evaluated. For an agent's full record, including its change history, open Administration and choose the agent's name.

Select agent panel listing Treasury, Procurement and Compliance agents

Handoffs

A blocked or held settlement does not stop at a refusal. It reaches a named owner, who acknowledges it within four business hours or it escalates, and who records what was done for the customer. DISCINTEL records the outcome the institution reports; it does not judge it. A handoff opens when a settlement is blocked or held, and the menu shows how many are open. The owner records one outcome: fulfilled elsewhere, declined with an explanation, referred to a specialist, or resubmitted.

Authority & Policy

Answers "why may this agent act, or not?" It traces the chain from institution → governance domain → delegating role → agent → grant → tools, then lists every check in the current evaluation.

Authority tab showing the delegation chain and evaluation checks

Approvals, Executions and Outcomes

The approval topology and signatures for the action in focus; the admission and execution receipt with the checks that were re-verified; and what was independently observed.

Objects & Data

Every file or data object you've provided: type, status, sensitivity, business type and hash. Open one to see its details or simulate a modification.

Tools & Integrations

Each tool the agents can call (HTTP APIs, MCP servers, internal services and enterprise apps) with its owner, consequence class, permitted agents, call counts and status. Disabling or re-enabling a tool is itself a governed change: it is proposed with a reason, approved and recorded. While a tool is disabled, no action that depends on it can be admitted or executed.

Tools and integrations table

TrustDNA Evidence

The evidence log: every event in order, each with a SHA-256 hash that covers the event before it. Changing or removing any past event breaks the chain, and verification reports exactly where.

TrustDNA evidence chain with numbered events and hashes

Inspector

Reconstruct and verify re-reads the evidence chain from storage, recomputes every link, rehashes retained files, and traces the focused action end to end: file → request → action → decision → approvals → admission → receipt → outcome. The record viewer lets you open any underlying record.

Inspector showing object-to-evidence lineage

5. Administration

Changes to governance itself go through the same lifecycle as any other action. They are proposed, evaluated, approved, admitted and evidenced. Nobody can quietly change who holds authority.

Every administrative change needs at least the Security Administrator's approval, and you can withdraw a pending one before it executes. Step-by-step procedures for each change are in the Admin playbook.

Administration with principals, roles and segregation-of-duties rules

6. Reports and assurance

Reports & Assurance maps your workspace records to the NAIC AI Risk Evaluation Supplement (v5.0 exposure draft). Each item is marked Evidenced (shown by records), Partial (records plus documents the institution holds) or Institution supplies (outside the workspace), with links to the records behind it.

Reports and Assurance with NAIC item mapping
The NAIC mapping is decision support. It shows what your records evidence; it isn't a regulatory filing or a certification.

7. The Personal space

The Personal space is for individuals. It holds your DISC behavioral profile and the rules your AI personas must follow. It never leaves your device: everything is encrypted in your browser with a passphrase only you know, and nothing is sent to DISCINTEL or to any AI service.

The Personal tour walks through it on real screens: creating the vault, the DISC profile, a persona, checking a request, the activity log and backup. It also opens from Guided tour in the Personal footer.

Create your vault

  1. Choose a passphrase of at least 10 characters. A short sentence works well.
  2. Confirm that you understand the recovery rule, then choose Create vault.
We cannot recover your vault. If you forget your passphrase, or clear your browser data without an exported backup, the vault is gone for good. Export a backup as soon as you've set things up (see Backup and devices).

Use Lock whenever you step away; unlocking needs your passphrase.

Your DISC profile

Rate 24 short statements from 1 (disagree) to 5 (agree). You get a score from 0 to 100 on each of four styles:

Your highest score is your primary style, and any style within 15 points of it is shown too. Choose Retake any time.

DISC profile with four style scores

DISC results describe self-reported tendencies. They aren't a clinical or psychological assessment, and they must not be used for hiring, credit, insurance or housing decisions.

Build a persona

A persona is a rule set for an AI that acts for you, for example an inbox assistant or a shopping helper. Give it a name, a purpose and a tone; the tone defaults to suit your DISC style. Then set what it may do:

ActionChoices
Summarize information · Draft a message or document · Send a message on my behalf · Create or change calendar events · Spend money · Share my personal informationAllow, Ask me first or Never
Spend limit per requestA dollar cap; 0 means no cap

DISCINTEL flags rules that clash with your profile. For example, a fast-moving D profile with autonomous sending gets a high-risk flag, because it removes your review step before a message leaves.

New persona form with tone and per-action rules

Check a request

Before an AI acts for you, choose the persona, the requested action, the amount (for spending) and a short description, then choose Check:

Each check is recorded in your Activity log, a private hash-linked log. Verify log recomputes it to show nothing was altered.

Request check returning BLOCK because the amount exceeds the spend limit

Backup and moving devices

Your vault lives in this browser on this device, for this exact web address. To keep it safe, or use it somewhere else:

  1. Open Vault & backup and choose Export encrypted backup. Store the file somewhere safe, such as a cloud drive; it's unreadable without your passphrase.
  2. On the other device or browser, sign in, open the Personal space and choose Import backup.
  3. Unlock it with the same passphrase.

Delete vault from this device (type DELETE to confirm) permanently erases it there. Backups you exported aren't affected.

Vault and backup screen with export, import and delete
Private or incognito windows erase stored data when they close, so don't keep a vault in one.

Switching between Business and Personal

From the Personal space, choose Business workspace at the top. From the Business workspace, open your account menu (top right) and choose Personal space.

8. Privacy and security at a glance

Full details: Privacy Policy · Terms of Service.

9. Troubleshooting

"Approval … lapsed"

The approval was pending for longer than its period (72 hours by default). The decision has been retired; choose Re-evaluate on the request to get a fresh decision and new approvals.

"Changes were requested at revision …"

An approver sent the request back. Change what they asked for, then choose Save a new revision and re-evaluate. The old revision can't be submitted again.

A research URL was refused

The message says why: a host that resolves to a private or reserved address, a port other than 80 or 443, a page over 2 MB or slower than 15 seconds, or a file type other than text, HTML, JSON or XML (PDFs aren't supported yet). For a source the server can't fetch, paste the relevant text instead.

"The quote does not appear word for word in the cited evidence"

A FACT has to quote its evidence exactly. Open the evidence unit, copy the sentence from it, and make sure the right evidence is ticked. If you are drawing a conclusion rather than quoting, record it as an INFERENCE.

Research is stuck at "Authorization required"

It asked for private sources. A Security Administrator must decide the access request on the research page; the requester can't. If the request lapsed, start the research again.

Legal Intelligence: "Run the agent" is disabled

The agent runs only on a matter that is open and has at least one source. If the page says Add sources first, add them. If it says the matter is cancelled or completed, open a new matter.

Legal Intelligence: "The draft is taking longer than expected"

Drafting runs in the background and can take a few minutes. Reload in a minute to see whether it finished.

Legal Intelligence: the review is refused

Only a licensed attorney can review a draft: tick the attestation, enter your name and write what you checked or what must change, in at least 20 letters.

A source shows "Provided text (no link)"

The source was pasted as text, so it has no public page to link to. Its quote was still checked word for word against the pasted text.

I didn't get the verification email

Check your spam or junk folder. You can keep using DISCINTEL while you wait. If it hasn't arrived after a few minutes, email legal@getdiscintel.com.

"Sign in to continue" or "Your session ended"

Your session expired. Sign in again; your workspace is where you left it.

The save chip doesn't say "Persisted"

Saving… clears on its own. Save failed means a record wasn't saved: choose the chip to see which record and why. If the server refused it, the reason is shown, and nothing else was affected. Reload to see exactly what the server holds. Read-only means your access level can view records but not change them. If it continues, email us.

"Sanctions screening was not run"

The selected agent isn't permitted to use the Sanctions Screening Service. Switch to an agent that is (in the sample, Treasury or Compliance) and ask again.

"Environment … is not registered there" or "is not permitted there"

The agent, the tool or the domain doesn't allow the environment you're in. Switch environment in Action context, or ask an administrator to change the agent's environments.

My Personal vault is missing

Vaults are stored per browser, per device and per web address. If you switched browsers, used a private window, cleared site data or used a different address, import your exported backup.

My passphrase doesn't unlock the vault

Passphrases are case-sensitive, so check Caps Lock. We can't reset or recover it. If it's truly lost, delete the vault and start a new one, or import an older backup whose passphrase you remember.

A decision I had stopped applying

Something material changed: the file, the agent, the environment or the tool. Re-evaluate the action against its current context.

I want to delete my account

Email privacy@getdiscintel.com from your account's address. Personal vaults you can delete yourself under Vault & backup.

10. Glossary

EnvironmentProduction or Test (UAT). A label every action carries, checked against the tool, the domain and the agent.
Runtime governor (DMGG)A second, independent check on each tool use. In shadow mode its verdict is recorded but not enforced.
ClosureThe server's final check that an executed action's obligations were met.
WithdrawRetire a submitted action before it executes; its decision and approvals stop applying.
PrincipalA person who holds roles and can delegate or approve.
AgentAn AI system that proposes and performs actions, only within the grants it holds.
GrantAuthority given to an agent: which effects, within which scope and amounts.
ObligationA rule an action must meet, such as an approval threshold or an outcome check.
MatterA Legal Intelligence research request: a legal question, its jurisdictions, its sources and the drafts made from them.
PropositionOne statement in a Legal Intelligence draft. A FACT must carry a quote from its source; the server checks it word for word.
Counsel reviewA licensed attorney's recorded decision on a draft. It accepts a draft for internal use and authorizes no external action.
HandoffThe record that a blocked or held request reached a named owner, who must acknowledge it and record what was done.
Regulatory contextThe DORA and NIS2 events that apply to an EU decision, from a dated, hashed snapshot. Informational only.
Consequence classHow serious an action's effects are, from A (low) to D (regulated or financial).
Governed actionA specific proposed act by an agent, bound to its material files and context.
DecisionThe ALLOW, ASK, HOLD or BLOCK verdict on a governed action, with every check listed.
Execution admissionA single-use, expiring permission to perform exactly one approved request.
Receipt vs. outcomeWhat the executor reports versus what was independently observed.
TrustDNADISCINTEL's hash-linked evidence log.
Segregation of dutiesPairs of roles one person may not hold together, and the rule that requesters can't approve their own actions.
Request changes / RejectAn approver's two ways to say no: send the request back for a new revision, or end it for good.
Evidence unitThe text taken from one research source, with its own hash, that claims must cite.
ClaimA statement in research tied to its evidence. A FACT must quote its evidence word for word.
SynthesisThe research summary, built only from accepted claims, with confidence and limitations.
Access requestThe approval a Security Administrator gives or refuses before research may use private sources.
Break-glassTemporary emergency authority that expires automatically and is fully recorded.

11. Getting help

Questions, feedback or problems: legal@getdiscintel.com. Privacy requests and security reports: privacy@getdiscintel.com.

DISCINTEL, LLC · Early access. The sample institution and its people, approvers, sanctions list and payment rail are fictional or simulated.