Why this is hard
AI-built tools arrive from many people, through many AI models, at a pace no review board can match. A review of each change one by one is slow, and builders route around it. No review at all means nobody knows which tools exist, who owns them or what data they touch.
What Substrait does
One registry for everything people build. Substrait registers every tool as an object with an owner, a purpose, a risk tier and a version. Substrait governs five kinds: Slates, knowledge bases, skills, web apps and agents.
Rules set once, applied to every tool. Each organisation sets its own policies and risk tiers in Substrait. A change that satisfies the policy is approved automatically. A change the policy flags goes to the right human approver, with deadlines and escalation.
Limits instead of reviews. An approval on Substrait sets a boundary: which data, read or write, customer-facing or not. Builders change the tool freely inside that boundary. A change that crosses the boundary goes back through approval.
A record nobody can alter. Substrait keeps an audit trail of every access and action. A platform admin cannot edit it, and it exports to your security monitoring.
A switch for every tool. Every tool on Substrait can be rolled back to the last good version or switched off.
