Governance rules
Permission to use an AI model is not permission to act
An approved inference must not automatically become the right to send an email, alter a customer record or trigger a payment. These operations carry different risks and require different evidence.
Current DUBSAR status
The Gateway is still being built and proven
The separation between AI traffic and business actions is part of the product architecture. It is not yet available as a universal control across customer environments.
Governance rules
A route is more precise than a model name
Saying that a model is approved is usually too broad. A useful decision includes the provider endpoint, model or known version, region, workflow identity, purpose and data class.
That context allows the same model family to be treated differently for synthetic testing, internal analysis and a customer-facing action.
- Provider route and selected model
- Calling workflow and responsible owner
- Declared purpose and data class
- Policy version, decision and validity period
Governance rules
Separate inference from side effects
A model call is an inference and may involve data leaving the organisation. Sending an email, changing a record or initiating a payment is a business side effect.
DUBSAR is designed to decide on those two events separately. A sensitive action must be bound to its content, destination, policy and a limited authorisation rather than inheriting permission from the model call.
Governance rules
Filtering only works at a real point of passage
Data can only be removed, masked or refused if the HTTP or API request passes through a component able to inspect it before egress. That is the role of the DUBSAR Gateway, linked to the deterministic Core.
If the decision cannot be verified, the safe behaviour is to stop: unavailable Core, invalid receipt, unknown route or insufficient context must remain visible failures.
Frequently asked questions
What to know before going further.
Can an approved AI model automatically perform a business action?
No. In the DUBSAR model, inference and business side effects are authorised separately.
Can DUBSAR filter every piece of company data?
No. Filtering is possible only for traffic that passes through the Gateway or an explicitly integrated control point.
Read next
Continue with another DUBSAR guide.
The portal remains in private testing. These guides explain what DUBSAR is proving — and what it does not yet claim.