{"training":{"id":"T-MODES-1","slug":"observe-and-enforce","title":"Observe and Enforce","topic":{"id":"observe-and-enforce","label":"Observe and Enforce"},"minutes":2,"version":1,"lang":"en","assignment":{"happened":"","matters":"A {minutesWord} training on what a policy does on your machine in each of its modes, and what to do when one stops your work."},"lesson":[{"id":"three-modes","heading":"What a policy does on {device}","body":["Your organisation sets policies on what agents do: which models they reach, which servers they connect, what goes into a prompt. Each policy has a mode, and the mode can differ by team.","qcontrol on {device} applies the mode each policy has for {team}: Off, Observe or Enforce."],"illustration":{"scene":"policy-modes","alt":"A policy in each of its three modes: Off lets the action through and records nothing, Observe lets it through and records a finding, Enforce stops it and records a finding."}},{"id":"observe","heading":"Observe: the work goes through, and it is written down","body":["Under Observe, the action goes through and your work carries on. qcontrol records a finding: what happened, on which machine, under which policy.","A finding is a record, not a verdict. It may come with a short training like this one, and it shows the policy's owner where a rule needs a change."],"illustration":{"scene":"mode-observe","alt":"{agent} on {device} acts under a policy that observes: the action goes through, and qcontrol records a finding.","animated":true}},{"id":"enforce","heading":"Enforce: the action is stopped","body":["Under Enforce, qcontrol stops the action on {device} where the policy can stop it: a prompt before it reaches the model, a connection before it opens. It records a finding there too.","Some policies can only record, whatever their mode: a sign-in to a personal account happens outside qcontrol's reach."],"illustration":{"scene":"mode-enforce","alt":"{agent} on {device} acts under a policy that enforces: qcontrol stops the action on the machine and records a finding."}},{"id":"when-stopped","heading":"What to do when a policy stops your work","body":["Read what qcontrol shows you: it names the policy that stopped the action. If your work needs what was stopped, ask IT or the policy's owner. They can sanction it, or grant an exception for your team.","Until then, keep the work on the tools and accounts that are sanctioned for {team}."],"illustration":{"scene":"mode-ask","alt":"You ask IT or the policy's owner; they can sanction what your work needs, or grant an exception for your team."},"instead":true}],"check":[{"id":"q-observe","prompt":"On your team, a policy is set to Observe. Your agent does something the policy covers. What happens?","choices":[{"id":"a","text":"The action is stopped, and nothing is recorded"},{"id":"b","text":"The action goes through, and a finding records it","right":true},{"id":"c","text":"The action goes through, and nothing is recorded"}],"explain":"Observe records; it does not stop. The finding is the record.","stepId":"observe"},{"id":"q-enforce","prompt":"A policy is set to Enforce. Where does qcontrol stop the action?","choices":[{"id":"a","text":"On your machine, before the prompt or the connection leaves it","right":true},{"id":"b","text":"At the provider, after the model has read the prompt"},{"id":"c","text":"At the end of the session, when the transcript is saved"}],"explain":"Enforcement happens on the machine, before the prompt or the connection leaves it.","stepId":"enforce"},{"id":"q-who","prompt":"Who decides whether a policy observes or enforces on your team?","choices":[{"id":"a","text":"You, from the app on your machine"},{"id":"b","text":"The provider of the model your agent uses"},{"id":"c","text":"Your organisation, for each team","right":true}],"explain":"Your organisation sets each policy's mode, and it can differ by team.","stepId":"three-modes"},{"id":"q-stopped","prompt":"A policy stopped something your work needs. What do you do?","choices":[{"id":"a","text":"Switch to another tool the policy might not cover"},{"id":"b","text":"Ask IT or the policy's owner to sanction it or grant an exception","right":true},{"id":"c","text":"Wait a day and try again"}],"explain":"The policy's owner can sanction it or grant an exception; another tool does the same thing under the same policy.","stepId":"when-stopped"}],"contact":{"owner":"IT","how":"Ask IT from the app, or reply to the message that brought you here."}},"version":1,"contentHash":"sha256:67e66883351c95398795897fe33f2761af6d52f487a51f4e95bc6e6fb0ac1a9b","slots":["agent","device","minutesWord","team"],"path":"app/data/trainings/en/observe-and-enforce.md"}