Skip to main content
    Reign OpsAI substrate

    The stack your agents run on, operated inside your own envelope.

    Agent runtimes, model access, the MCP and tool layer, and the control plane underneath all three. Four parts of one substrate, operated by iTmethods as a single-tenant dedicated instance, each one producing a record a reviewer can follow.

    Delivered as a single-tenant dedicated instance, in infrastructure iTmethods operates or in your own cloud account on AWS or Azure. Both are available today. Air-gapped and sovereign are in development.

    The substrate four parts
    One envelope, operated by iTmethods run Agent runtimes reach Governed model access bind MCP and tool operations underneath The control plane identity · network · secrets · logs Gateway models Each layer carries the one above it A record at every layer, in a form a reviewer can follow
    Four parts, one envelope. The agent is the part everyone looks at; the four underneath it are the part that decides whether it can be relied on.
    The decision you are actually making

    Agents are infrastructure now. Somebody has to operate them.

    The agent is the part everyone looks at. The part that decides whether it can be relied on is the four layers underneath it, and those are an operations problem before they are a governance one.

    Underneath all three rest on it
    What everybody demos Agent runtimes Model access MCP and tools All three rest on this The control plane Identity Network boundary Secret store Scheduler Retrieval layer Log pipeline Operated by iTmethods, on infrastructure you own Hardest of the four to add afterwards
    Nobody demos the control plane. It is the first thing a reviewer asks about, and the last thing you can retrofit.
    01The layers stack, and each one carries the one above
    Agent runtimes ride on governed model access. Model access rides on the MCP and tool layer. All three ride on the control plane.

    Which means a gap in the control plane is not a control-plane problem. It is a gap in everything standing on it.

    02We do not build the agents
    iTmethods does not host or serve foundation models at scale, and does not sell you an agent.

    What we operate is the envelope they run inside: the runtime, the routing, the tool boundary and the substrate beneath. That distinction is worth being exact about, because most of this market is selling the other thing.

    03The control plane is where reviews are decided
    Identity, network boundary, secret store, scheduler, the retrieval layer, the log pipeline.

    None of it is what anyone demos. All of it is what a reviewer asks about, and it is the layer that is hardest to add afterwards.

    04Twenty-one years of the same problem
    Operating foundational infrastructure inside somebody else's boundary, under their controls, is not a new discipline here.

    The workload is new. The operating model is the one iTmethods has run since before any of this was called AI.

    The substrate

    Four parts. One envelope.

    Each is operated on its own terms and each has a page. Together they are the thing an agent actually runs on.

    Run

    Agent runtimes

    The operational discipline of running agent runtimes in production under controls: sandboxed at the process and network boundary, with runtime image lifecycle, sandbox policy, agent identity, capacity and incident response operated for you.

    What you get. Agents that run somewhere specific, with an identity, rather than wherever a developer started them.
    Reach

    Governed model access

    The gateway, policy and record layer between your agent runtime and the model providers. Version pinning, fail-over routing and credential rotation run as managed infrastructure rather than as configuration somebody owns personally.

    What you get. One path to the models, with the policy applied at the point the call is made.
    Available today How the boundary works →
    Bind

    MCP and tool operations

    The tool layer run as a governed supply chain: managed MCP servers, tool registries, third-party integrations and in-house tool servers, sandboxed at the tool-call boundary with provenance on every tool definition.

    What you get. An agent's reach is something you define and can show, rather than something you discover afterwards.
    Available today MCP and tool operations →
    Underneath

    The control plane

    The substrate beneath the substrate: identity, network boundary, secret store, compute scheduler, the retrieval layer and the log pipeline, operated on infrastructure the customer owns.

    What you get. The layer a reviewer asks about, built in rather than retrofitted.
    Available today Scope the control plane →

    The same architecture in every deployment shape. What changes is where it sits, and only the single-tenant dedicated instance is available today. Deployment options →

    What the envelope means

    The same posture at every layer.

    The point of one substrate is that these hold across all four parts rather than being negotiated at each.

    Every agent has an identity.

    Bound to your provider, not a shared service account. An agent that cannot be named cannot be accounted for later.

    Sandboxed at the process and network boundary.

    What a runtime can reach is set before it starts, not discovered from what it managed to reach.

    Policy applies before a tool binds.

    Evaluated at the moment of binding rather than reviewed afterwards, and the binding is recorded either way.

    The record is written where the work happened.

    In line rather than in batch, on the same substrate as the thing it describes, so nothing has to be reconciled later.

    Where Reign fits

    Reign Ops runs the substrate. Reign governs what the AI does on it.

    Four layers produce four kinds of record, and on their own that is four more things to reconcile. Reign Gateway sits on the model path and the tool path, which is where a single policy can cover every layer at once.

    What the record carries
    For each model call: the identity that made it, the policy that applied, the decision taken, the model that answered and the time it happened. For each tool binding: what the agent asked to bind, what was allowed and what it did once bound. For the control plane: identity events, key rotations, retrievals and scheduling decisions. Written in line rather than assembled in batch.
    The part worth being precise about. This is a record of what happened, prepared so that a reviewer can follow it. It is not a verdict, it is not an audit opinion, and it is not independent assurance of anyone's controls. iTmethods makes no compliance, certification or accreditation claim under any framework. How the boundary works → · Regulatory alignment →
    Shared responsibility

    What we run, what you run.

    Written down before anything is deployed, so the boundary is a document rather than a discovery.

    WhoWhat they hold
    Reign Ops, automatedOperate the agent runtimes, the model-access gateway, the tool layer and the control plane inside your authorization boundary. Enforce your identity provider at every edge. Sandbox at the process and network boundary. Apply policy before a tool binds. Stream the record to your systems. Patch and scale the substrate.
    Customer authoredWhich agents and which tools are sanctioned. What each agent is allowed to reach and on whose authority. Data classification and the retention you need. What a policy exception means and who may grant one. Your models, your prompts, your data.
    Operating partner engagementScoping and phased onboarding layer by layer. Standing up the initial policy set with your team. Authoring the first evaluators against your agent surface. The periodic posture review, and the decisions that change the design rather than the configuration.
    Before the scoping call

    The questions that arrive every time.

    Do you build the agents?
    No, and we do not host or serve foundation models at scale either. What Reign Ops operates is the envelope the agents run inside: the runtime, the routing to the model providers, the tool boundary and the control plane underneath. You choose the agents.
    Can we adopt one part without the others?
    Yes, and most estates do. The layers stack, so adopting a lower one makes the ones above it easier, but each is scoped and operated on its own terms. The first conversation is usually about which layer is causing the most trouble right now.
    Which deployment shapes can we have?
    A single-tenant dedicated instance, in infrastructure iTmethods operates or in your own cloud account on AWS or Azure. Both are available today and both are single-tenant. Google Cloud is planned for 2027. Air-gapped and sovereign are in development. There is no multi-tenant or shared option at any tier. Deployment options states which is which without softening any of them.
    What does it cost?
    Scoped per engagement. This site publishes no price list and no tiers, because what we would operate for you is the thing being priced and it is different every time. The scoping call is where that gets answered, and it commits you to nothing.
    FINOS Linux Foundation, Silver member Agentic AI Foundation, Silver member
    Member and contributor in the open standards behind governed AI. The Linux Foundation, FINOS, and the Agentic AI Foundation.
    Next step

    Tell us what your agents run on today.

    Which runtimes, which models, and what they are allowed to reach. We will come back with what we would operate, what stays with your team, and which layer we would start with.