← c16c16 / wf3 - Agent Control Plane — seat-lensed (wf3) / Showback·control-plane-v1-v1 · 2026-06-03 · draft
Qpoint
QP
Showback by Useragent-as-actor · who the spend & risk sits behind

Finance · Showback

Who is behind the fleet — spend and risk per person.

Attribute AI spend and sensitive-data exposure to the people behind the agents, so cost and risk have an owner — and surface the spend that has no chargeable owner at all.

Bottom line

$122.10 (18%) has no chargeable owner — only 82% of spend is chargeback-ready. Top exposure: (proxy-only, no identity) — $44.10, critical-risk, 3 sensitive opens. Table is ranked risk-weight first, then spend.

$122.10

unchargeable liability

18% of spend, no owner

82%

chargeback-ready

verified-identity spend

1

critical-risk identities

top of the risk-weighted rank

3

with sensitive-data opens

6 paths fleet-wide

Unchargeable liability

$122.10 has no chargeable owner — 2 of 6 identities are unverified (vendor aliases like duck.com, or proxy-only agents with no human behind them). That's 18% of total spend sitting on the books with no P&L to land on.

Resolve 2 unverified →

Risk-adjusted view — how this table is ranked

Rows are ordered risk first, then spend. A $200 Critical-risk identity outranks a $5k ‘ok’ spender for attention, because the biggest bill is rarely the biggest exposure. Each row shows its risk weight — the multiplier that lifts it above raw dollars.

Per-user showback

6 identities · $684.50 total · ranked by risk weight, then spend
Telemetry identityTokensShowbackSensitive dataRisk · weightChargeable to
(proxy-only, no identity)top exposureno observed identity1.1M4% of fleet$44.103 openshigh severityCritical ×3 weight · 3 findingsunchargeableno identity
svc-support@qpoint.io1 agent5.6M19% of fleet$168.402 openshigh severityElevated ×2 weightEngineeringvia directory — projected
dev-7f3@duck.comunverified alias2.4M8% of fleet$78.00estnone observedElevated ×2 weight · 1 findingunchargeableunjoined alias
mark@qpoint.io2 agents7.7M26% of fleet$245.504 openshigh severityok ×1 weight · 1 findingEngineeringvia directory — projected
jane@qpoint.io1 agent3.1M11% of fleet$96.20none observedok ×1 weightEngineeringvia directory — projected
svc-data@qpoint.io1 agent9.2M32% of fleet$52.30none observedok ×1 weight · 1 findingEngineeringvia directory — projected

Joined from costs.by_user · dlp.by_owner (sensitive opens) · risk weight = max(agents.danger_level) rank + findings per owner — all from app/data/c16-fleet.ts (qcontrol /api shape). Identity is observed, not verified; showback is attribution, not chargeback — chargeback needs an IdP-verified owner.