Laag 04 · ACT · vier-lagen-stack
Waarneming en redenering leveren pas iets op wanneer ze verantwoorde uitkomsten produceren. Laag 04 zet de oordelen van de swarm om in actie voor klanten en toezichthouders — in Nederland, onder NIS2-waardige verwachtingen. Elke actie wordt voorgesteld door een agent, bewaakt door een mens, en end-to-end gelogd.
Detections carry type, severity, confidence and status; the pipeline moves them from new to triaged with a full audit trail. Confidence is a number with a history, not a vibe.
Agents propose actions (block, notify, escalate). Nothing executes without a human approval — approvals, rejections and executions are all logged with timestamps.
Public-source intelligence deepens the picture around a verdict — entities, domains, exposure. Sourced, dated and cited, so the customer can re-verify every claim.
Because every layer logs, a final report isn't assembled after the fact — it is the concatenation of the trail: sensor events, agent correlations, reasoning verdicts, human approvals. That is what NIS2 actually asks for.
Correlated entity intelligence on fraud infrastructure — domains, identities, attack patterns — with evidence attached to every claim.
Dutch organisations under NIS2 need demonstrable process. Continuous detection plus an immutable trail is the posture auditors want to see.
Live, verifiable telemetry (1M+ honeypot events) and an open reasoning architecture — the platform documents itself.