Configure | OpenSpan Console

Decision policy controls

Whisper + decoy gating

Whisper trigger

Prevent synthetic-only whisper

Confidence bands

Hard max monitoring time

Monitoring scope

Hard limit enforcement

Liveness contribution

Fail-open default

Rollback target

Notes

Action

Policy enforcement telemetry

Applied bundles + monitoring guardrails

Awaiting data.

Liveness integration

Third-party liveness vendor (stubbed)

Provider

Endpoint

Auth method

API key reference

Timeout (ms)

Media profile

Fork mode

Failure mode

Decisioning mode

Liveness signals are ingested via UMS APIs and used in policy decisioning when enabled.

Policy bundles & publishing

Versioned, signed distribution

Bundle	Version	Status	Published	Owner
bundle-2026-01-24	v12	Active	2026-01-24 18:40	Policy Admin

Bundle name

Version

Status

Owner

Action

Activate bundle

Notes

Action

Rollback target

Notes

Action

Bundles include consent strategy, routing rules, and fail-open defaults with last-known-good caching.

Whisper library & localization

Brand + detection variants

Active whisper packs

Publish status: N/A · Last publish: N/A

EN - Core warning ES - Spanish TL - Tagalog HI - Hindi ZH - Mandarin

Supports five subscriber-selected languages with dynamic runtime selection.

Enable languages (max 5)

Rollback target

Notes

Action

Experience variants

Fraudulent intent whisper

Default tone, safe disclosure copy.

Active

Synthetic + intent whisper

Escalated wording for confirmed clones.

Pilot

Whisper asset catalog

Brand + language + detection targeting

Search

Brand / customer type

Language

Detection type

Status

Asset ID	Asset	Brand	Customer type	Language	Detection type	Storage	Status	Updated

Supports multiple recordings across brands, detection types, and subscriber language preferences.

Asset ID (leave blank to create new)

Asset name

Brand

Customer type

Language

Detection type

File reference

Storage region

Bucket

Object key

Version tag

Checksum (SHA256)

Size (KB)

KMS key (optional)

Status

Whisper storage & cache policy

In-region S3 source of truth + node cache

Storage configuration

Primary region

Bucket name

Object prefix

KMS key alias

Signed URL TTL (sec)

VPC endpoint

Cache policy (MRF nodes)

Cache enabled

Max age (minutes)

Disk limit (MB)

Prewarm on publish

Eviction policy

Fallback mode

S3 is the system of record (US region). Nodes cache whisper assets for latency and resiliency.

Whisper routing matrix

Dynamic selection at runtime

Publish status: N/A · Last publish: N/A

Route ID	Brand	Customer type	Detection type	Language	Asset ID	Status	Priority

Route ID (leave blank to create new)

Brand

Customer type

Detection type

Language

Asset ID

Status

Priority

Runtime selection uses brand + customer type + detection type + language to map to the correct whisper file.

Consent strategy

Per-service enforcement

Sub-service consent

Whisper

Decoy engagement

AI assistant screening

Rollback target

Notes

Action

Consent audit

Immutable consent changes with actor + timestamp. Audit exports available to operator compliance teams.

Last consent update

Subscriber segment: High-risk prepay

2 hrs ago

Audit trail retention

90 days (meets 60-day requirement)

Compliant

Subscriber consent management

Provisioned via carrier APIs

Search

Subscriber ID	Phone	Whisper	Decoy	Assistant	Source	Updated	Action
Awaiting data.

Subscriber ID

Phone number

Whisper consent

Decoy consent

Assistant consent

Consent source

Effective at

Consent updates are audited and enforced during live processing. Bulk updates can be ingested via /integration/v1/consent/bulk.

Decoy safety guardrails

PII refusal + unsafe response suppression

PII refusal policy

Unsafe response suppression

Consent request blocking

Escalation path

Last guardrail trigger

Guardrail events are logged to the governance audit trail when triggered.

Decoy persona library

Shared honeypot personas + endpoint pools

Personas are selected by SBC/CSSF routing using pool membership. Configure via JSON below or the /integration/v1/decoy/* APIs.

Personas

ID	Name	Gender	Pronouns	Locale	TTS Provider	Voice ID	Status
Awaiting data.

Personas JSON

Pools

ID	Name	Strategy	Status
Awaiting data.

Pools JSON

Pool membership

Pool ID	Persona ID	Weight	Priority	Status
Awaiting data.

Pool members JSON

Decoy endpoints

ID	Label	Type	Target	Pool ID	Weight	Status
Awaiting data.

Endpoints JSON

Fallback selection

Applied only when decoy mode is set but no persona headers are supplied. Use mode "default" or "cycle".

Fallback JSON

Use IDs referenced here in the SIP decoy headers for deterministic persona selection.

Routing & SIP invocation

Reserved numbers + headers

Reserved number ranges

Invocation header

Misdial response

Decoy unavailable response

Rollback target

Notes

Action

Range	Mode	Precedence	Status
+1 833 555 xxxx	Monitor	10	Active

Decoy destination	Type	Target	Status
Decoy Agent Cluster	Internal	sip:decoy.internal.svc	Active

Changes are versioned and distributed as signed policy bundles with last-known-good caching.

Model registry & lifecycle

Current releases, rollout status, and lifecycle actions

Model	Version	Stage	Updated	Rollback
IntentShield	3.2.1	Production	2026-01-24	3.1.8
CloneGuard	4.7.0	Production	2026-01-22	4.6.4
DecoyAgent	2.1.0	Pilot	2026-01-23	2.0.4

Release status

Stage, rollout, and active status

Model	Stage	Version	Rollout	Updated	Status
IntentShield	Production	3.2.1	100%	2026-01-24	Active
CloneGuard	Production	4.7.0	100%	2026-01-22	Active
DecoyAgent	Pilot	2.1.0	35%	2026-01-23	Active

Lifecycle actions

Create versions, promote, rollback

Prompt model

Version

Prompt summary

Prompt text Not opened

Notes

Action

Prompt model

Version

Prompt summary

Prompt text Not opened

Notes

Action

CloneGuard model

Version

Artifact URI

Checksum

GPU endpoint

Notes

Action

Release model

Stage

Version

Rollout %

Notes

Action

Rollback model

Rollback version (optional)

Notes

Action

Model version history & release log

Prompt bundles, artifacts, and audit trail

Model	Version	Kind	Created	Artifact	Checksum	Endpoint	Summary
CloneGuard	4.7.0	NN	2026-01-22	s3://openspan-models/cloneguard/4.7.0/model.tar.gz	9f2c11	gpu://cloneguard-prod	Synthetic voice detection model

Release log

Promotion + rollback history

Timestamp	Action	Model	Stage	From	To	Rollout	Actor	Notes
2026-01-24T02:12:00Z	Promote	IntentShield	Production	3.1.8	3.2.1	100%	ops-admin	Prompt refresh rollout

Decision policy controls

Policy enforcement telemetry

Liveness integration

Policy bundles & publishing

Whisper library & localization

Active whisper packs

Experience variants

Fraudulent intent whisper

Synthetic + intent whisper

Whisper asset catalog

Whisper storage & cache policy

Storage configuration

Cache policy (MRF nodes)

Whisper routing matrix

Consent strategy

Sub-service consent

Consent audit

Last consent update

Audit trail retention

Subscriber consent management

Decoy safety guardrails

Decoy persona library

Personas

Pools

Pool membership

Decoy endpoints

Fallback selection

Routing & SIP invocation

Model registry & lifecycle

Release status

Lifecycle actions

Model version history & release log

Release log

Prompt editor