Dispatches
Trust · Athena Governance System · Attribution & reversibility

Let agents work at scale with auditable, reversible changes

Every save is stamped with who made it—human or agent—plus the conversation that caused it, the before state, and one-click rollback.

Built with a global professional services firm; in production there for over a year.

Model.xlsxABCD212EUR/USD1.0911.084Sep 19RowCurrencyNew rateOld rateDateRowCurrencyUpdatedPreviousSep 19RowCurrencyUpdatedPreviousSep 19RowCurrencyUpdatedPreviousSep 19WHO CHANGED WHATAthena via Controller23:14 · Model!B2:F400Analyst08:02 · Summary!C4 ·manual editAthena via Controllerwas 1.084 · now 1.091 ·4,000 cellsControllerCompare · Roll back rangeROLLED BACK · REST KEPT
Fig. 01Every agent save shows who, when, what changed, and offers Compare or rollback
  • Per-save attribution to human or agent
  • Session and message context
  • Compare in Editor
  • Selective rollback
  • Time-travel snapshots
  • Version-aware citations
The problem

AI edits without audit trails create risk

An agent changes 4,000 cells the night before the board meeting. Most tools give you three options: send the old deck, send the new one and hope, or rebuild by hand. None of that is review. All of it is redo.

Auditors, controllers, and general counsel need one more thing than a correct answer. They need to know who changed what, where, and why, and to be able to put it back.

We will not tell you who is liable. We show you who changed what, agent or human, where, and why.

Most toolsActivity Monitorv7_FINAL_agent (?)Send old deckSend new and hopeRebuild by handNo review, only redoReviewer has no way to see what changed4,000-cell entry expandedRoll back range · 1 rowReview completeSelective rollback, keep the rest
Fig. 02From guesswork and all-or-nothing choices to selective, auditable rollback
How it works

Attribute. Compare. Roll back. Cite.

  1. Attribute. Every save on every asset, sheet, document, deck, notebook, database, computer, is stamped with a human or an agent, plus the session and message that caused it.

  2. Compare. Compare in Editor shows before and after for any agent change, side by side, before anyone presents.

  3. Roll back. Selectively: one range, one slide, one paragraph. Or the whole workspace to the snapshot before the message. Twenty-four-hour undo on Computers (agent workstations) by default.

  4. Cite. Every claim the agent makes carries a deep link to the page, cell, slide, shape, timestamp, or line. Citations are version-aware: if the source changed after the agent read it, the citation chip says so and opens the version it saw.

01Edit byhuman or …Save stamped ·author02Compare inEditorShow before andafter side by …03Roll backRange · slide ·paragraph04Agent claimCitation · page· cell · slide05Sourcechanged?Flag: reviewVersion history · time travel · every save attributed
Fig. 03Every save is stamped; every change is comparable, reversible, and cited
Use cases

Attribution across every asset and edit type

The night before the board meeting.

An agent updates FX assumptions across 4,000 cells. The controller opens the Activity Monitor over coffee, reads the reason, finds one wrong assumption on row 212, rolls back that range, and keeps the rest. Four minutes.

Model.xlsxABCDRowCurrencyRatePreviousSep 19RowCurrencyRatePreviousSep 19212JPY/USDPrevious1.091Sep 19RowCurrencyRatePreviousSep 19RowCurrencyRatePreviousSep 19WHO CHANGED WHATAthena via Controller23:14 · Model!B2:F400ControllerRoll back range ·Model!B212:F212Controller3,999 cells retainedROLLED BACK · REST KEPT
Fig. 04One wrong assumption on row 212 rolled back; 3,999 cells kept. Four minutes.

Cell-level attribution.

Attribution by cell, row, column, or range: author, time, before, after. "I can attribute every single cell to who did it, whose agent." Spreadsheets are the cornerstone; the same model covers documents, decks, and notebooks.

Model.xlsxABCD212EUR/USD1.091Sep 19FX rateRowCurrencyRateDateTypeRowCurrencyRateSep 19FX rateWHO CHANGED WHATAthena via ControllerSep 19 23:14Cell B212was 1.084 · now 1.091
Fig. 05Cell-level attribution: author, time, before, after

Work-product lineage for tens of thousands of AI-generated documents.

Which agent, which sources, which human approved, which version the reviewer saw. Built for audit methodology and risk teams; used across an entire audit suite.

Agent draftAthenaInitial documentgeneratedReviewer approvalReviewerApproved for useRevisionAthenaUpdated after sourcechangeFinal approvalPartnerReady for deliveryWhich agent, which sources, which human approved, which version the reviewer saw
Fig. 06Work-product lineage: agent, sources, approver, and the version reviewed—pinned

Reversible AOP states.

Approved states of an Agent Operating Procedure become restorable versions. Change the procedure, break it, restore Tuesday's.

v12AnalystInitial approvalMondayAthenaParameter updateTuesdayControllerApproved stateWednesdayAthenaBroke procedureroll back this rangeApproved states become restorable versions; restore Tuesday's after breaking it
Fig. 07Approved AOP states become restorable versions; restore Tuesday's after a break

Time-travel snapshots on Computers.

A snapshot after every message. Roll back, or restore as a new computer and keep both.

Message 1AthenaSnapshot createdMessage 2AthenaSnapshot createdMessage 3AthenaSnapshot createdMessage 4AthenaCurrent stateroll back this rangeRoll back to any snapshot, or restore as new computer and keep both
Fig. 08A snapshot after every message; roll back or restore as new and keep both

Citations that know when the world moved.

A dashboard number cited to a table that was reloaded since. The chip flags "source changed · review" and opens both versions.

Original readAfter reloadDashboard number citedSource table valueCitation createdAgent reads table at original stateChip: source changedOpens both versionsFlag review when source reloaded since
Fig. 09Citation chips flag when the source changed after the agent read it
What customers say
“It's good to understand the capability of the platform. That how far, and how quickly you guys can get these things going [...] that has been impressive overall.”
VP-level AI leader · A Fortune 500 retailer
“Lets us get a lot more out of our data than [...] We can sit on top of all of the data in [our data warehouse] as opposed to just, like, our little ingested, you know, three gigabytes semantic models. I think we have a lot of power here.”
Analytics lead · A Fortune 500 retailer
“Gave Athena the spreadsheet, explained which column I was trying to figure out, and then ten secs it told me... exactly how the calculation was based on the other data.”
Analyst · A global manufacturer
“He wrote the entire stuff. By itself. And I was there, and I was thinking, alright. If I had to write all this stuff, I mean, I would've spent days, days, days.”
Manufacturing analyst · A global manufacturer
“I send that to the programmer and he said, alright. I read your file. I copied the section of the code because he has the right interface, and it works. Wow. Just like magic.”
Manufacturing analyst · A global manufacturer
“One workspace. All different, let's say, avatars of their output data. Right? Suddenly, it's dashboard. Excel is here. PowerPoint is when it's all together. It's very impressive.”
Global Sustainability lead · A global manufacturer
“Use the Athena platform probably closer to the concept and how it was designed, like, with the spaces architecture where you've got a set of primitives and capabilities, and you bring together the right set of capabilities to solve a task.”
Audit lead · A global professional services firm
“Digital worker, it gets spun up, it gets given access to the toolkits that it needs. It gets given access to the data that it needs. Just exists for the period it needs to exist to perform the task. And then it gets torn back down again afterwards.”
Audit lead · A global professional services firm
“I like that direction, that concept of the agent is the agent. It becomes an entity in its own right with its own ownership and its own missioning, and you get rid of the gray area and the blurry lines.”
Audit lead · A global professional services firm
“It was PowerPoint... there was no kind of distinction between the two. So that was killer. And I literally had a meeting on it today, and people said how great it was.”
Sales analyst · A global CPG provider

Verbatim from customer calls. Customers anonymized.

Why it matters

Reversibility enables high-autonomy agents

High autonomy is safe when the work is reversible. Because every action can be undone, you can let the agent do a significant amount of work and insert humans only where they add judgment. Every human correction is also a trace your organization owns: the beginning of a decision record for how work actually gets done.

Governance

Attribution, rollback, and export on every asset

  • Attribution on every asset type, every save.

  • Compare and selective rollback everywhere; snapshots on Computers.

  • Version-aware citations with change flags.

  • Export the audit log.

What to plan for

"Everything reversible" is the design goal. Sessions, sheets, documents, decks, notebooks, and computers are there. Some external write-backs, an email once sent, a row once committed to your ERP, are not, and we tell you which before the agent does them.

FAQ

Why does attribution matter?

It lets you give agents real work, because every change is visible, attributed, and reversible.

Can we undo an agent's work?

Yes. Roll back a single change and keep the rest.

How do reviewers check work?

Changes are highlighted, so reviewers check differences rather than redo the work.

The rest of the platform

Related products and stories

Let the agent change 4,000 cells. Then read the diff.

Bring a model you care about. We will let Athena touch it and show you exactly what it did.