Agentic AI Reference Architecture

Governance & Compliance · Software component

Purpose-Based Access Controller

Software componentGovernance & ComplianceSafety, Security & Governancearc:PurposeBasedAccessController

An access-control component that permits use of sensitive data only for purposes the data subject consented to, keeping fairness-monitoring data siloed from other applications.

Responsibility. Enforces consented purpose limits on access to sensitive demographic data.

Also known as: Purpose limitation control, Consent enforcement

controls access tocontrols access toreadscontrols access toPersonal Data Store: controls access toPersonal Data StoreUser Preference Profile Store: controls access toUser Preference Profile …Consent Registry: readsConsent RegistryDemographic Data Store: controls access toDemographic Data Store
Direct neighbourhood (hover for relationship types)

Relationships

reads dependency

controls access to control

Classification

Quality attributes
Privacy (NIST AI RMF: privacy-enhanced)Security (ISO/IEC 25010 | NIST AI RMF: secure and resilient)
Risks mitigated
Function creepMisuse of demographic data beyond fairness monitoring

Sources

  1. Ch9.4: T. Nguyen, "Fairness and Bias Mitigation," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.4. ISBN: 9798244538229.
  2. Ch10.2: T. Nguyen, "Proactive Agents," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 10.2. ISBN: 9798244538229.