Onyx Security — AGS v2.2 Compliance

Executive Summary

Onyx Security achieves a 20% estimated AGS v2.2 compliance score. As a security-focused platform, Onyx demonstrates notable strength in governance override resistance and deception detection capabilities, reflecting its adversarial defence orientation. The platform provides solid operational boundary enforcement and namespace isolation. However, Onyx's security-centric design leaves significant governance gaps in human control responsiveness, cross-jurisdiction compliance, model provenance tracking, and the full spectrum of emergence and infrastructure governance dimensions. The platform would benefit from broadening its governance capabilities beyond pure security into operational and compliance domains.

A: Mandate

24%

B: Integrity

24%

C: Identity

24%

D: Accountability

24%

E: Compliance

20%

F: Adversarial

16%

G: Boundary

4%

H: Alignment

16%

I: Emergence

0%

J: Infrastructure

0%

Key Strengths

AG-27

Governance Override Resistance

Strong resistance to governance policy bypass attempts. The platform's security architecture makes it difficult for agents to circumvent established governance controls.

Score: 2 / 3

AG-39

Deception Detection

Dedicated deception detection capabilities that identify misleading agent outputs, false claims, and manipulative reasoning patterns.

Score: 2 / 3

AG-03

Adversarial Coordination Detection

Security-oriented monitoring for adversarial coordination patterns, leveraging threat intelligence to identify coordinated agent manipulation attempts.

Score: 1 / 3

Critical Gaps

AG-38

Human Control Responsiveness

Security-focused rather than control-focused. No mechanisms for real-time human override and graceful agent handoff in operational contexts are evidenced in public documentation.

Score: 0 / 3 — Structurally Absent

AG-47

Cross-Jurisdiction Compliance

No cross-jurisdiction compliance mapping. Tracking or enforcement of jurisdictional regulatory requirements across deployment regions is not evidenced in public documentation.

Score: 0 / 3 — Structurally Absent

AG-48

Model Provenance Tracking

No model provenance tracking. Establishing or verifying the origin, training lineage, or integrity of underlying models used by agents is not evidenced in public documentation.

Score: 0 / 3 — Structurally Absent

Recommendations

Add governance configuration control (AG-07) for versioned policy management, enabling auditable governance policy change tracking.
Implement resource consumption governance (AG-23) to monitor and limit agent resource usage patterns.
Build human control responsiveness features (AG-38) enabling real-time human override, pause, and handoff capabilities.
Develop cross-jurisdiction compliance mapping (AG-47) to support multi-region regulatory requirements.
Submit for independent AGS verification to replace estimated scores with certified compliance ratings.

Full Dimension Assessment

Dimension	Name	Category	Score
A — Mandate & Action Governance (AG-01 – AG-05)
AG-01	Operational Boundary Enforcement	Evidenced	1
AG-02	Cross-Domain Activity Governance	Not Documented	0
AG-03	Adversarial Coordination Detection	Evidenced	1
AG-04	Mandate Scope Control	Evidenced	1
AG-05	Action Authorisation Verification	Evidenced	1
B — Integrity & Configuration Governance (AG-06 – AG-10)
AG-06	Record Integrity Verification	Evidenced	1
AG-07	Governance Configuration Control	Not Documented	0
AG-08	Deployment Integrity Verification	Evidenced	1
AG-09	Delegated Authority Governance	Not Documented	0
AG-10	Configuration Drift Detection	Not Documented	0
C — Identity & Access Governance (AG-11 – AG-15)
AG-11	Agent Identity Verification	Not Documented	0
AG-12	Credential Lifecycle Management	Evidenced	1
AG-13	Privilege Escalation Prevention	Evidenced	1
AG-14	Inter-Agent Authentication	Not Documented	0
AG-15	Namespace Isolation	Evidenced	1
D — Accountability & Oversight (AG-16 – AG-20)
AG-16	Decision Audit Trail	Evidenced	1
AG-17	Multi-Party Authorisation	Not Documented	0
AG-18	Outcome Attribution	Evidenced	1
AG-19	Human Oversight Architecture	Evidenced	1
AG-20	Purpose-Bound Operation	Not Documented	0
E — Compliance & Agent Governance (AG-21 – AG-25)
AG-21	Regulatory Compliance Verification	Evidenced	1
AG-22	Behavioural Consistency Verification	Evidenced	1
AG-23	Resource Consumption Governance	Not Documented	0
AG-24	Output Validation	Not Documented	0
AG-25	Financial Transaction Governance	Structurally Absent	0
F — Adversarial Defence (AG-26 – AG-30)
AG-26	Prompt Injection Defence	Not Documented	0
AG-27	Governance Override Resistance	Evidenced	2
AG-28	Collusion Detection	Structurally Absent	0
AG-29	Data Poisoning Defence	Not Documented	0
AG-30	Social Engineering Resistance	Not Documented	0
G — Boundary & Scope Governance (AG-31 – AG-35)
AG-31	Capability Boundary Enforcement	Not Documented	0
AG-32	Scope Creep Detection	Not Documented	0
AG-33	Environmental Boundary Control	Not Documented	0
AG-34	Cross-System Propagation Control	Structurally Absent	0
AG-35	Autonomy Level Governance	Structurally Absent	0
H — Alignment & Reasoning Governance (AG-36 – AG-40)
AG-36	Value Alignment Verification	Not Documented	0
AG-37	Reasoning Transparency	Not Documented	0
AG-38	Human Control Responsiveness	Structurally Absent	0
AG-39	Deception Detection	Evidenced	2
AG-40	Goal Stability Verification	Structurally Absent	0
I — Emergence & Evolution Governance (AG-41 – AG-45)
AG-41	Emergent Capability Detection	Structurally Absent	0
AG-42	Collective Intelligence Governance	Structurally Absent	0
AG-43	Self-Modification Prevention	Structurally Absent	0
AG-44	Long-Horizon Attack Detection	Structurally Absent	0
AG-45	Evolutionary Pressure Monitoring	Structurally Absent	0
J — Infrastructure & Operational Governance (AG-46 – AG-50)
AG-46	Infrastructure Dependency Mapping	Structurally Absent	0
AG-47	Cross-Jurisdiction Compliance	Structurally Absent	0
AG-48	Model Provenance Tracking	Structurally Absent	0
AG-49	Operational Continuity	Structurally Absent	0
AG-50	Physical Impact Governance	Structurally Absent	0

Sources

Sources: Onyx Security platform documentation (onyx.security/platform), Guardian Agent architecture documentation, launch announcement March 2026 (Business Wire). Documentation reviewed April 2026.
Methodology: Scores estimated from publicly available documentation only. No proprietary or non-public information was used. Platforms are invited to submit for independent verification to receive a verified score.