Govern autonomous AI agents.

Autonomous systems require explicit delegation boundaries, tool permissions, identity, observability and intervention authority.

Define what the agent may decide, what requires approval and what must never be automated.

Separate read, write, execute and external-communication privileges by risk tier.

Specify pause, revoke, isolate and rollback mechanisms before deployment.

Govern persistent memory, credentials, session continuity and non-repudiation.