Authority boundary
Every agent action belongs to a named role, permission scope and accountable owner.
Governance controls
No agent receives broad trust by default. Capability is staged through scope, least privilege, approval, evidence, recovery and review.
Every agent action belongs to a named role, permission scope and accountable owner.
External communication, irreversible changes and sensitive access require explicit approval or a documented policy exception.
Material actions should record intent, context, authority, result and recovery path without exposing unnecessary private content.
Memory and retrieval should store what helps continuity while keeping secrets, raw payloads and high-risk data out of ordinary context.
Build provenance, validation evidence, rollback material and operational ownership must be established before production activation.
Governance is part of the product surface, not buried in internal notes.
View priorities