Glossary

Admin — someone who uses the console. Manages policy, people, providers and billing.
Consumes a seat.
Agent — an AI assistant that can act, not only answer, by calling tools.
Blocked — a request or tool call your policy stopped. Not an error.
Developer — someone whose AI tools are governed. Uses the Endpoint Suite, never the
console. Consumes a seat.
Device — one enrolled machine, identified by a key pair in its secure storage.
Drift — a governed tool that no longer points at the Gateway, because its configuration
was changed outside the app. Surfaces as Non-compliant.
Endpoint Suite — the desktop app that enrolls a machine and points its AI tools at the
Gateway.
Evidence pack — the point-in-time report from Compliance.
Gateway — the proxy every governed AI request passes through.
Lethal trifecta — private data access, untrusted content, and an exfiltration channel
present together. See Lethal-trifecta enforcement.
Managed API key mode — requests billed to your organization's provider key.
MCP — Model Context Protocol, how an assistant calls tools.
Posture finding — something about an AI tool's own autonomy settings on a device.
Report-only.
Prompt capture — the opt-in setting that stores conversation content.
Routed endpoint — a remote MCP server reached through the Gateway, so policy applies.
Rug pull — an MCP tool whose description or schema changes after you approved it.
Seat — one person, admin or developer. Shared pool.
Shim — the small process between an AI tool and a local MCP server that asks the
Gateway for a decision.
Slopsquatting — registering package names that AI models commonly hallucinate.
Subscription mode — requests billed to the developer's own AI plan.
Ungoverned agent — an autonomous AI system on a device whose traffic does not pass
through the Gateway, so it can be detected but not routed, enforced or audited. See
Ungoverned AI agents.