FIRST PUBLIC USE
March 20, 2026
- What it is
- The layer of decisions that has to exist above a platform's controls: who decided this agent should operate, within what bounds, and on whose authority.
- What it is not
- Not a product, not a console, and not a control. No vendor ships it, because it is made of decisions rather than settings.
- The evidence it produces
- A dated, signed record naming a person, a scope, and a reconsideration trigger.
- Who is accountable
- The business authority with standing to accept the risk, not the team that built or administers the agent.
- The examination question it answers
- Who authorized this, and can you show me the decision rather than the configuration?