Policy-Bound AI Agents for Secure Enterprise Automation
Keywords:
Governed Enterprise Intelligence Fabric, Generative Artificial Intelligence (GenAI), Retrieval-Augmented Generation (RAG), Context-Aware AI, AI Governance, Enterprise Knowledge Management, Explainable Artificial Intelligence (XAI), AI Safety, Data Provenance, Intelligent Enterprise Automation.Abstract
Artificial intelligence is transforming business processes, yet concerns about quality and trust persist. While generative AI appears more capable than earlier tools, it often operates without sufficient context, creating risks to safety and relevance. Addressing these shortcomings requires grounding AI agents in enterprise-specific knowledge, augmenting them with context-aware retrieval, and ensuring provenance of their outputs. This approach improves output quality while mitigating hallucinations, toxicity, and ethical risks—all while preserving meaningful human oversight.
We introduce the Governed Enterprise Intelligence Fabric, a framework that embeds retrieval-augmented AI agents within a context-aware enterprise automation system. These agents incorporate retrieval capabilities to support automation and generation tasks grounded in enterprise-relevant data. The framework captures and surfaces verifiably accurate results, flags failures such as crashes, hallucinations, and unsafe outputs, and delivers relevant context to augment human decision-making. This context spans provenance and privacy considerations; although enterprises generate substantial contextual data, much of it goes unused. Critical context is frequently available within enterprise systems but remains inaccessible to AI agents without native integration—our framework closes this gap.
References
1. Alevizos, L. (2025). Automated cybersecurity compliance and threat response using AI, blockchain and smart contracts. International Journal of Information Technology, 17, 767–781.
2. Bai, Y., Jones, A., Ndousse, K., Askell, A., Chen, A., DasSarma, N., Drain, D., Fort, S., Ganguli, D., Henighan, T., Joseph, N., Kadavath, S., Kernion, J., Conerly, T., Showk, S. E., Elhage, N., Hatfield-Dodds, Z., Mann, B., Tran-Johnson, E., ... Kaplan, J. (2022). Training a helpful and harmless assistant with reinforcement learning from human feedback. arXiv.
3. Gorle, R., & Pareek, P. K. (2026). Agentic AI-Based Security Orchestration for Oracle Cloud and Multi-Cloud Platforms. International Journal of Computer Information Systems & Industrial Management Applications, 18, 354.
4. Bender, E. M., Gebru, T., McMillan-Major, A., & Shmitchell, S. (2021). On the dangers of stochastic parrots: Can language models be too big? In Proceedings of the 2021 ACM Conference on Fairness, Accountability, and Transparency (pp. 610–623).
5. Bommasani, R., Hudson, D. A., Adeli, E., Altman, R., Arora, S., von Arx, S., Bernstein, M. S., Bohg, J., Bosselut, A., Brunskill, E., Brynjolfsson, E., Buch, S., Card, D., Castellon, R., Chatterji, N., Chen, A., Creel, K., Davis, J. Q., Demszky, D., ... Liang, P. (2021). On the opportunities and risks of foundation models. arXiv.
6. Bhatt, S. S., Rajore, T., Aggarwal, K., Ananthanarayanan, G., Chandra, R., Chandran, N., Choudhury, S., Gupta, D., Kiciman, E., Pandey, S. K., Setty, S., Sharma, R., & Zhao, T. (2025). Enterprise AI must enforce participant-aware access control. arXiv.
7. Nandan, B. P., Kumar, M. V. K., Garapati, R. S., Bandi, V. D. V. K., Davuluri, P. S. L. N., & Mangalampalli, B. M. (2026). AI-Enhanced Semiconductor Yield Optimization Using Hybrid Deep Learning and Edge Data Analytics. In 2026 IEEE International Conference on AI Engineering and Innovations (AIEI) (pp. 1–6). IEEE. 2026 IEEE International Conference on AI Engineering and Innovations (AIEI). https://doi.org/10.1109/aiei69164.2026.11497190
8. Carlini, N., Tramer, F., Wallace, E., Jagielski, M., Herbert-Voss, A., Lee, K., Roberts, A., Brown, T., Song, D., Erlingsson, Ú., Oprea, A., & Raffel, C. (2021). Extracting training data from large language models. In 30th USENIX Security Symposium (pp. 2633–2650).
9. Deng, X., Gu, Y., Zheng, B., Chen, S., Stevens, S., Wang, B., Sun, H., & Su, Y. (2024). Mind2Web: Towards a generalist agent for the web. In Advances in Neural Information Processing Systems.
10. European Parliament and Council of the European Union. (2024). Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union.
11. Gahnberg, C. (2021). What rules? Framing the governance of artificial agency. Policy and Society, 40(2), 194–210.
12. Meda, R., Motamary, S., Dodda, A., Kummari, D. N., Kaulwar, P. K., & Gadi, A. L. (2026). Edge-AI Integration for Accelerated Decision-Making in Industrial Robotics and Manufacturing Plants. In Lecture Notes in Networks and Systems (pp. 332–344). Springer Nature Switzerland. https://doi.org/10.1007/978-3-032-19185-4_27
13. Gebru, T., Morgenstern, J., Vecchione, B., Vaughan, J. W., Wallach, H., Daumé III, H., & Crawford, K. (2021). Datasheets for datasets. Communications of the ACM, 64(12), 86–92.
14. Shetty, T. S., Gorle, R., Malani, S. R., Mattaparthi, R., & Kalra, M. (2026, August). AI-Driven Self-Healing Infrastructure Using Predictive Material Intelligence. In 2026 7th International Conference On Computational Vision and Bio Inspired Computing (ICCVBIC) (pp. 1876-1883). IEEE.
15. Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T., & Fritz, M. (2023). Not what you've signed up for: Compromising real-world LLM-integrated applications with indirect prompt injection. In Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security.
16. Ji, J., Qiu, T., Chen, B., Zhang, B., Lou, H., Wang, K., Duan, Y., He, Z., Zhou, J., Zhang, Z., Zeng, F., Li, X., Chen, C., Yang, Z., Ruan, Y., Li, S., & Gao, Y. (2023). AI alignment: A comprehensive survey. arXiv.
17. Raut, B., Garg, A., Mangalampalli, B. M., Jindal, N., Mahajan, V., & Saraswati, K. (2026). Multidisciplinary Strategies for Improving Maternal and Reproductive Health Outcomes and Mental Outcomes. International Journal of Drug Delivery Technology, 16(34s). https://doi.org/10.25258/ijddt.16.34s.36
18. Kairouz, P., McMahan, H. B., Avent, B., Bellet, A., Bennis, M., Bhagoji, A. N., Bonawitz, K., Charles, Z., Cormode, G., Cummings, R., D’Oliveira, R. G. L., Eichner, H., El Rouayheb, S., Evans, D., Gardner, J., Garrett, Z., Gascón, A., Ghazi, B., Gibbons, P. B., ... Zhao, S. (2021). Advances and open problems in federated learning. Foundations and Trends in Machine Learning, 14(1–2), 1–210.
19. Li, G., Hammoud, H. A. A. K., Itani, H., Khizbullin, D., & Ghanem, B. (2023). CAMEL: Communicative agents for “mind” exploration of large language model society. In Advances in Neural Information Processing Systems.
20. Sudha Rani, P. R., Amistapuram, K., Pamisetty, V., Singireddy, S., Kummari, D. N., & Sheelam, G. K. (2025). Hybrid Knowledge Graph–Deep Learning Framework for Automated Exception Handling and Investigation in Complex Insurance Claims. In 2025 IEEE 3rd Global Conference on Wireless Computing and Networking (GCWCN) (pp. 1–6). IEEE. 2025 IEEE 3rd Global Conference on Wireless Computing and Networking (GCWCN). https://doi.org/10.1109/gcwcn66157.2025.11448301
21. Liu, X., Yu, H., Zhang, H., Xu, Y., Lei, X., Lai, H., Gu, Y., Ding, H., Men, K., Yang, K., Zhang, S., Deng, X., Zeng, A., Du, Z., Zhang, C., Shen, S., Zhang, T., Su, Y., Sun, H., ... Tang, J. (2023). AgentBench: Evaluating LLMs as agents. arXiv.
22. Kolla, S. K., Bandi, V. D. V. K., & Meda, R. (2026). Comment on “From laboratory promise to decision-grade practice: strengthening reproducibility and casework relevance in AI-assisted bloodstain ageing.” Forensic Science, Medicine and Pathology. https://doi.org/10.1007/s12024-026-01258-x
23. Madaan, A., Tandon, N., Gupta, P., Hallinan, S., Gao, L., Wiegreffe, S., Alon, U., Dziri, N., Prabhumoye, S., Yang, Y., Welleck, S., Majumder, B. P., Hermann, K., Gupta, S., & Yazdanbakhsh, A. (2023). Self-refine: Iterative refinement with self-feedback. In Advances in Neural Information Processing Systems.
24. National Institute of Standards and Technology. (2020). Security and privacy controls for information systems and organizations (NIST Special Publication 800-53, Revision 5).
25. Krishnan, M., Yandamuri, U. S., Recharla, M., Challa, K., Kolla, S. H., & Valiki, S. (2026). Adaptive Machine Learning Ecosystem for Personalized Medicine and Digital Finance: Leveraging Azure Cloud, Data Engineering, and Workflow Automation. In 2026 5th OPJU International Technology Conference (OTCON) on Smart Computing for Innovation and Advancement in Industry 5.0 (pp. 1–6). IEEE. 2026 5th OPJU International Technology Conference (OTCON) on Smart Computing for Innovation and Advancement in Industry 5.0. https://doi.org/10.1109/otcon69332.2026.11629728
26. National Institute of Standards and Technology. (2020). Zero trust architecture (NIST Special Publication 800-207).
27. National Institute of Standards and Technology. (2023). Artificial intelligence risk management framework (AI RMF 1.0) (NIST AI 100-1).
28. Kumar, S. S., Gadi, A. L., Sheelam, G. K., Kummari, D. N., Reddy Koppolu, H. K., & Pamisetty, A. (2026). AI-Driven Compliance and Audit Framework for Manufacturing Infrastructure in Automotive Connected Services and Financial Ecosystems. In 2026 IEEE International Conference for Convergence in Computing Technology (I3CTCON) (pp. 1–6). IEEE. 2026 IEEE International Conference for Convergence in Computing Technology (I3CTCON). https://doi.org/10.1109/i3ctcon68242.2026.11507231
29. National Institute of Standards and Technology. (2024). Artificial intelligence risk management framework: Generative artificial intelligence profile (NIST AI 600-1).
30. Ouyang, L., Wu, J., Jiang, X., Almeida, D., Wainwright, C., Mishkin, P., Zhang, C., Agarwal, S., Slama, K., Ray, A., Schulman, J., Hilton, J., Kelton, F., Miller, L., Simens, M., Askell, A., Welinder, P., Christiano, P., Leike, J., & Lowe, R. (2022). Training language models to follow instructions with human feedback. In Advances in Neural Information Processing Systems.
31. Engineering Intelligent Cloud-Native Data Ecosystems for Predictive Decision-Making in Industry. (2026). Journal of European Economic History, 7(2), 68–88. https://doi.org/10.61336/jeeh/26-2-7 (Original work published as Engineering Intelligent Cloud-Native Data Ecosystems for Predictive Decision-Making in Industry)
32. Raji, I. D., Smart, A., White, R. N., Mitchell, M., Gebru, T., Hutchinson, B., Smith-Loud, J., Theron, D., & Barnes, P. (2020). Closing the AI accountability gap: Defining an end-to-end framework for internal algorithmic auditing. In Proceedings of the 2020 Conference on Fairness, Accountability, and Transparency (pp. 33–44).
33. Shinn, N., Cassano, F., Gopinath, A., Narasimhan, K., & Yao, S. (2023). Reflexion: Language agents with verbal reinforcement learning. In Advances in Neural Information Processing Systems.
34. Pareek, P. K. (2026). Self-Evolving Analytics Pipelines for Reliable AI-Augmented Software Systems. Journal of Intelligent Decision Making and Information Science, 3(5s), 1558-1578.
35. Taeihagh, A. (2021). Governance of artificial intelligence. Policy and Society, 40(2), 137–157.
36. Weidinger, L., Mellor, J., Rauh, M., Griffin, C., Uesato, J., Huang, P.-S., Cheng, M., Glaese, A., Balle, B., Kasirzadeh, A., Kenton, Z., Brown, S., Hawkins, W., Stepleton, T., Biles, C., Birhane, A., Haas, J., Rimell, L., Hendricks, L. A., ... Gabriel, I. (2021). Ethical and social risks of harm from language models. arXiv.
37. Wu, Q., Bansal, G., Zhang, J., Wu, Y., Li, B., Zhu, E., Jiang, L., Zhang, X., Zhang, S., Liu, J., Awadallah, A. H., White, R., Burger, D., & Wang, C. (2023). AutoGen: Enabling next-gen LLM applications via multi-agent conversation. arXiv.
38. Yandamuri, U. S. Next-Generation Industry Platforms Integrated Systems For Predictive & Intelligent Operations. Solaris Vantage.
39. Xiang, Z., Zheng, L., Li, Y., Hong, J., Li, Q., Xie, H., Zhang, J., Xiong, Z., Xie, C., Yang, C., Song, D., & Li, B. (2025). GuardAgent: Safeguard LLM agents via knowledge-enabled reasoning. In Proceedings of the 42nd International Conference on Machine Learning (Vol. 267, pp. 68316–68342).
40. Yao, S., Zhao, J., Yu, D., Du, N., Shafran, I., Narasimhan, K., & Cao, Y. (2023). ReAct: Synergizing reasoning and acting in language models. In International Conference on Learning Representations.
41. Mahadevan, S. (2026). Governed Serverless Automation Ecosystem for AI-Driven Enterprise Integration and Sustainable Cloud Operations. International Journal of Computer Information Systems and Industrial Management Applications, 18(16s), 1561-1570.
42. Zhang, Y., Wang, B., Li, T., Jia, X., Li, X., & Liu, Y. (2024). InjecAgent: Benchmarking indirect prompt injections in tool-integrated large language model agents. arXiv.
43. Zhou, S., Xu, F. F., Zhu, H., Zhou, X., Lo, R., Sridhar, A., Cheng, X., Ou, T., Bisk, Y., Fried, D., Alon, U., & Neubig, G. (2024). WebArena: A realistic web environment for building autonomous agents. In International Conference on Learning Representations.
44. Alevizos, L. (2025). Automated cybersecurity compliance and threat response using AI, blockchain and smart contracts. International Journal of Information Technology, 17, 767–781.
45. Sharma, C. K., Gorle, R., Mangala, N., Jindal, A., & Sundram, S. (2026, August). Blockchain-Based Human Resource Management System for Transparent Workforce Governance. In 2026 7th International Conference On Computational Vision and Bio Inspired Computing (ICCVBIC) (pp. 1741-1745). IEEE.
46. Acharya, D. B., Kuppan, K., & Divya, B. (2025). Agentic AI: Autonomous intelligence for complex goals—A comprehensive survey. IEEE Access, 13, 18912–18936.
47. Hughes, L., Dwivedi, Y. K., Malik, T., Shawosh, M., Albashrawi, M. A., Jeon, I., et al. (2025). AI agents and agentic systems: A multi-expert analysis. Journal of Computer Information Systems, 65(4), 489–517.
48. Kratsch, W., Manderscheid, J., Röglinger, M., & Seyfried, J. (2021). Machine learning in business process monitoring: A comparison of deep learning and classical approaches used for outcome prediction. Business & Information Systems Engineering.
49. Kecht, C., Egger, A., Kratsch, W., & Röglinger, M. (2023). Quantifying chatbots’ ability to learn business processes. Information Systems, 113, 102176.
Additional Files
Published
Data Availability Statement
The data supporting the findings of this study are available from the corresponding author upon reasonable request.
Issue
Section
License
Copyright (c) 2026 Ravi kumar vankayalapalli, Hiroshi Tanaka (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
This work is licensed under the Creative Commons Attribution 4.0 International License (CC BY 4.0). Authors retain full copyright of their published work. Under this license, others are free to share, copy, distribute, transmit, remix, transform, and build upon the published work for any purpose, including commercial use, provided that appropriate credit is given to the original authors, a link to the license is provided, and any changes made are clearly indicated. No additional restrictions may be applied that limit others from doing anything the license permits. All published articles are freely and permanently accessible online to readers worldwide without any subscription or access fees.
License URL: https://creativecommons.org/licenses/by/4.0/
