ValidMind, a provider of AI governance solutions for financial institutions, has introduced Atryum, an open-source governance framework designed to oversee AI agent actions. The project is now available on GitHub, and the company has also begun accepting applications for early access to ValidMind Agent Authority, an enterprise-grade offering built on the Atryum foundation.

As AI agents increasingly perform high-impact tasks such as executing financial transactions, modifying production systems, and updating critical records without human intervention, organizations face a growing governance challenge. While existing security systems can verify credentials and access rights, they often lack the ability to determine whether a specific action falls within an agent's approved responsibilities. Atryum addresses this oversight gap by providing an independent layer of control and accountability.

Positioned directly within the execution path of AI agents, Atryum monitors every tool invocation across protocol, harness, and platform layers. Before an action is completed, the framework evaluates it against organizational policies, escalates it for human review when necessary, and records all decisions in a dedicated audit trail controlled by the organization. The solution is designed to function across different runtimes, AI models, and deployment environments.

"Financial institutions are preparing to manage an entirely new type of workforce," said Jonas Jacobi, Co-founder and CEO of ValidMind. "Many organizations either route every decision through human approval or limit agents so heavily that they deliver little value. The real opportunity comes from establishing governance structures that allow agents to operate independently while maintaining oversight. Agent Authority provides each agent with defined responsibilities, accountability, and visibility, enabling meaningful autonomy without sacrificing control."

As an open-source initiative, Atryum offers developers and platform teams a standardized, platform-independent approach to governing AI agents at the moment actions are executed. Rather than creating custom governance mechanisms for every new agent framework, organizations can build on a common foundation.

ValidMind Agent Authority, currently available through an early access program within the ValidMind platform, expands on Atryum with enterprise-focused capabilities tailored for regulated industries. These include AI-driven policy evaluation for complex scenarios that static rules cannot adequately assess, approval workflows based on users and groups, hierarchical agent-specific governance policies, integration with enterprise identity and access management systems, and advanced audit analytics for regulatory and compliance requirements. The solution will be offered under a commercial Enterprise License and will include testing, validation, support services, and contractual protections expected by enterprise customers.

"When the same platform that runs an AI agent is also responsible for governing it, there is an inherent conflict of interest," said Andres Rodriguez, Co-founder and CTO of ValidMind. "Effective oversight must remain independent from the vendors whose agents are being supervised. Atryum enforces governance directly within the action execution path, regardless of which runtime or credential initiated the request. However, enforcement alone is not enough. Regulated organizations also require robust policy management, approval controls, and comprehensive auditability to justify and defend every decision."

Atryum is now available through GitHub and Atryum.org under a dual licensing model that includes both Apache 2.0 and Enterprise License options.

Click here to know more.

JumpCloud Inc. has unveiled its latest study, The Agentic IAM Pulse Report: Closing the Governance Gap to Accelerate with AI, revealing that AI agents are becoming deeply integrated into core business functions while governance and oversight lag behind. Although 72% of organizations are already using AI agents, 92% admit they face major challenges in scaling them securely.

The report points to a growing concern as AI agents move beyond experimental use into critical operations such as financial reporting and HR provisioning. As their responsibilities expand, these systems are being granted greater autonomy with reduced supervision.
Key insights from the report include:

According to Joel Rennich, AI adoption has advanced faster than the safeguards required to manage it securely. He noted that AI agents are increasingly operating within sensitive workflows, often with fragmented identities, elevated access privileges, and minimal supervision. Rennich emphasized that identity management has effectively become the final security perimeter for AI agents, making formal governance frameworks essential to transform AI from a potential risk into a long-term driver of growth.

To address these concerns, JumpCloud Inc. introduced its Agentic IAM solution, designed specifically for the AI-driven era. The platform delivers a centralized control system that connects human users, non-human identities, and autonomous agents to verified corporate identities. By automating governance and security controls throughout the AI lifecycle, the company aims to help organizations turn AI from an unmanaged threat into a secure business advantage.

Click here to download the full report.