{ "schemaVersion": "1.0.0", "id": "https://aisdlc.ai/agentic-engineering/knowledge-graph.json", "title": "Agentic Engineering Knowledge Atlas graph", "edition": "2026.08", "reviewedAt": "2026-08-09", "authorityBoundary": "AISDLC working definitions and relationships are editorial synthesis informed by cited primary sources. They are reference material, not a standard, certification, or authorization.", "nodes": { "concepts": [ { "id": "concept:agentic-engineering", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/agentic-engineering", "index": "01", "title": "Agentic engineering", "shortTitle": "Discipline", "thesis": "The unit of engineering expands from code to the complete system that makes bounded agency useful.", "definition": "The discipline of designing intent, context, memory, tools, execution, verification, control, and evidence so goal-directed agents can perform meaningful work while humans remain accountable.", "maturity": "emerging", "maturityNote": "The name is emerging; the underlying practices are becoming operational.", "shift": { "from": "AI that suggests code", "to": "Engineered systems that delegate outcomes" }, "practices": [ "Design the environment around the model", "Make authority and stop conditions explicit", "Treat evidence as a first-class output" ], "failureModes": [ "Equating model capability with system reliability", "Treating autonomy as the goal instead of bounded outcomes" ], "reviewedAt": "2026-08-09" }, { "id": "concept:intent-engineering", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/intent-engineering", "index": "02", "title": "Intent engineering", "shortTitle": "Intent", "thesis": "A prompt requests work. A durable intent system defines what correct, safe, and complete work means.", "definition": "The practice of turning goals into versioned specifications, constraints, interfaces, invariants, decision rights, acceptance criteria, and testable outcomes before agents implement them.", "maturity": "maturing", "maturityNote": "Spec-driven practice is growing, but spec-as-source is not a universal consensus.", "shift": { "from": "Prompt as instruction", "to": "Specification as executable intent" }, "practices": [ "Version requirements beside implementation", "Encode invariants and acceptance criteria", "Trace design decisions back to intent" ], "failureModes": [ "Verbose specifications without enforceable tests", "Assuming generated implementation keeps the specification current" ], "reviewedAt": "2026-08-09" }, { "id": "concept:context-engineering", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/context-engineering", "index": "03", "title": "Context engineering", "shortTitle": "Context", "thesis": "The control surface is no longer only the prompt; it is everything the model can see at the moment of decision.", "definition": "The deliberate selection and maintenance of instructions, knowledge, tools, state, examples, and artifacts within a finite model attention budget.", "maturity": "maturing", "maturityNote": "A concrete practice with rapidly evolving techniques and tooling.", "shift": { "from": "More tokens and larger prompts", "to": "Smallest sufficient high-signal state" }, "practices": [ "Use progressive disclosure and just-in-time retrieval", "Budget and prune model-visible state", "Reset context with structured handoff artifacts" ], "failureModes": [ "Context accumulation that buries the objective", "Untrusted retrieved content silently steering action" ], "reviewedAt": "2026-08-09" }, { "id": "concept:durable-memory", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/durable-memory", "index": "04", "title": "Durable project memory", "shortTitle": "Memory", "thesis": "What survives a context reset becomes institutional infrastructure—and a new integrity boundary.", "definition": "Persistent, attributable project knowledge that carries decisions, outcomes, requirements, failures, and operating state across agent sessions without assuming that every stored item remains true or safe.", "maturity": "emerging", "maturityNote": "Useful patterns exist; no settled enterprise memory architecture has emerged.", "shift": { "from": "Chat history as memory", "to": "Governed institutional state" }, "practices": [ "Store decisions and progress as reviewable artifacts", "Attach provenance, permissions, and freshness rules", "Validate memory before it re-enters context" ], "failureModes": [ "Memory poisoning that persists across sessions", "Stale summaries becoming invisible policy" ], "reviewedAt": "2026-08-09" }, { "id": "concept:harness-engineering", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/harness-engineering", "index": "05", "title": "Harness engineering", "shortTitle": "Harness", "thesis": "The model supplies capability; the harness turns capability into repeatable, inspectable work.", "definition": "Engineering the agent loop, task decomposition, tools, permissions, session state, checks, retries, feedback, checkpoints, and stop conditions that surround a model.", "maturity": "maturing", "maturityNote": "A fast-forming production discipline whose terminology is still new.", "shift": { "from": "Tune the prompt", "to": "Engineer the working environment" }, "practices": [ "Expose tests, logs, and interfaces directly to agents", "Encode recovery and back-pressure", "Make the repository legible to future agent runs" ], "failureModes": [ "Retry loops without new evidence", "A powerful model operating in an underspecified environment" ], "reviewedAt": "2026-08-09" }, { "id": "concept:tools-and-protocols", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/tools-and-protocols", "index": "06", "title": "Tools, skills & protocols", "shortTitle": "Interfaces", "thesis": "Interoperability expands what agents can do; it does not decide what they should be trusted to do.", "definition": "The action and knowledge interfaces through which agents use tools, load procedural skills, access enterprise context, and collaborate with other agents.", "maturity": "maturing", "maturityNote": "Protocol milestones exist, while security and governance profiles continue to evolve.", "shift": { "from": "One assistant with plugins", "to": "Composable capability fabric" }, "practices": [ "Keep tool contracts narrow and typed", "Separate protocol compatibility from authorization", "Record tool source, version, identity, and effect" ], "failureModes": [ "Tool descriptions granting accidental authority", "Protocol support being mistaken for trust" ], "reviewedAt": "2026-08-09" }, { "id": "concept:execution-substrate", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/execution-substrate", "index": "07", "title": "Agent execution substrate", "shortTitle": "Substrate", "thesis": "The workspace, browser, shell, network, and identity are part of the agent—not background infrastructure.", "definition": "The isolated, stateful environment in which agents observe and act, including compute, filesystem, browser, network, credentials, resource limits, and session lifecycle.", "maturity": "emerging", "maturityNote": "Sandboxing is established; agent-specific substrates are still taking shape.", "shift": { "from": "Run the model somewhere", "to": "Engineer the place where action occurs" }, "practices": [ "Isolate work by task and identity", "Constrain network, secrets, and resource use", "Capture environment transitions as evidence" ], "failureModes": [ "Hidden environmental side effects", "Shared credentials and unbounded egress" ], "reviewedAt": "2026-08-09" }, { "id": "concept:agent-identity", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/agent-identity", "index": "08", "title": "Agent identity & delegated authority", "shortTitle": "Authority", "thesis": "Every consequential agent action needs a principal, a delegator, a purpose, a policy decision, and an expiry.", "definition": "The identity and authorization discipline that treats an enterprise agent as a non-human principal with attributable, purpose-bound, time-bound permissions.", "maturity": "emerging", "maturityNote": "IAM foundations are established; agent-specific standards and profiles are still developing.", "shift": { "from": "Borrowed user credentials", "to": "Explicit non-human authority" }, "practices": [ "Bind authority to action, resource, purpose, and time", "Preserve the human or service delegation chain", "Expire or suspend agents without a valid owner" ], "failureModes": [ "Agents impersonating users", "Permissions surviving ownership or purpose changes" ], "reviewedAt": "2026-08-09" }, { "id": "concept:multi-agent-verification", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/multi-agent-verification", "index": "09", "title": "Independent verifier systems", "shortTitle": "Verifiers", "thesis": "A builder can test its work. It cannot independently accept the risk created by its work.", "definition": "A separation-of-judgment architecture in which builder agents, evaluator agents, deterministic checks, domain experts, and authorization authorities challenge different failure surfaces.", "maturity": "emerging", "maturityNote": "Independent assurance is established; multi-agent implementations remain experimental.", "shift": { "from": "Self-review before merge", "to": "Independent challenge across the lifecycle" }, "practices": [ "Separate builder and verifier context", "Use heterogeneous verification methods", "Route unresolved disagreement to accountable humans" ], "failureModes": [ "Multiple agents sharing the same blind spot", "Model graders treated as independent authorities" ], "reviewedAt": "2026-08-09" }, { "id": "concept:eval-driven-development", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/eval-driven-development", "index": "10", "title": "Eval-driven development", "shortTitle": "Evals", "thesis": "The test target is the whole agent system: outcome, trajectory, environment, side effects, and policy adherence.", "definition": "An engineering loop that converts expected behavior and observed failures into repeatable evaluations combining deterministic checks, environment inspection, security testing, model graders, repeated trials, and human judgment.", "maturity": "maturing", "maturityNote": "The discipline is becoming concrete while measurement standards remain nascent.", "shift": { "from": "A benchmark score", "to": "A living system-level assurance suite" }, "practices": [ "Evaluate outcomes and trajectories", "Calibrate graders against expert judgment", "Turn production corrections into regression cases" ], "failureModes": [ "Broken tasks producing authoritative scores", "Optimizing the benchmark instead of the operating outcome" ], "reviewedAt": "2026-08-09" }, { "id": "concept:observability-control", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/observability-control", "index": "11", "title": "Observability & control", "shortTitle": "Control plane", "thesis": "Observability explains what happened. A control plane determines what is allowed to happen next.", "definition": "The combined telemetry and enforcement architecture for tracing agent behavior, evaluating policy, obtaining approval, constraining action, revoking authority, quarantining execution, and stopping systems.", "maturity": "emerging", "maturityNote": "Telemetry conventions are maturing; a unified agent control plane is not yet one settled standard.", "shift": { "from": "Logs after execution", "to": "Evidence-aware intervention during execution" }, "practices": [ "Trace model, tool, policy, approval, and outcome events", "Keep deny, hold, revoke, and stop paths operational", "Connect anomalies to accountable response" ], "failureModes": [ "Rich traces with no intervention authority", "A kill switch that is not continuously tested" ], "reviewedAt": "2026-08-09" }, { "id": "concept:evidence-engineering", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/evidence-engineering", "index": "12", "title": "Evidence engineering", "shortTitle": "Evidence", "thesis": "The durable handoff is not the conversation. It is the attributable chain from intent to deployed outcome.", "definition": "The design of versioned, queryable evidence linking requirements, decisions, implementations, tests, evaluations, approvals, deployments, runtime signals, and lifecycle actions.", "maturity": "maturing", "maturityNote": "Software provenance is established; complete AI and agent lifecycle evidence models are emerging.", "shift": { "from": "Screenshots and chat transcripts", "to": "Machine-readable chain of proof" }, "practices": [ "Bind evidence to the exact released artifact", "Preserve verifier identity and decision authority", "Carry runtime outcomes into recertification" ], "failureModes": [ "Evidence assembled after the decision", "Artifacts that cannot be traced to what actually ran" ], "reviewedAt": "2026-08-09" }, { "id": "concept:human-accountability", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/human-accountability", "index": "13", "title": "Human accountability", "shortTitle": "Accountability", "thesis": "Agency can be delegated. Enterprise accountability cannot.", "definition": "The operating discipline that assigns a named human role authority and answerability for an agent’s purpose, risk, decision rights, authorization, intervention, outcomes, and lifecycle.", "maturity": "maturing", "maturityNote": "Human accountability is established; agent-specific roles and decision models are still being operationalized.", "shift": { "from": "A human somewhere in the loop", "to": "A named human with decision authority" }, "practices": [ "Assign exactly one accountable role per consequential decision", "Publish decision rights and escalation paths", "Keep override, suspension, and risk acceptance human-authorized" ], "failureModes": [ "Accountability diffused across a committee or vendor", "A review click treated as ownership of the outcome" ], "reviewedAt": "2026-08-09" }, { "id": "concept:risk-tiered-autonomy", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/risk-tiered-autonomy", "index": "14", "title": "Risk-tiered autonomy", "shortTitle": "Autonomy", "thesis": "Autonomy is an evidence-backed risk budget, not a feature toggle.", "definition": "The practice of classifying an agent by impact, data sensitivity, action scope, and reversibility, then binding that tier to maximum autonomy, required controls, approval authorities, and monitoring depth.", "maturity": "maturing", "maturityNote": "Risk-tiering is established; consistent mappings from agent capability to permitted autonomy are still evolving.", "shift": { "from": "Automation on or off", "to": "Graduated, bounded decision authority" }, "practices": [ "Classify risk before architecture and build", "Separate assistive, read-only, transactional, and consequential authority", "Reclassify when tools, data, users, or impacts change" ], "failureModes": [ "A low-risk label surviving material scope expansion", "One checklist applied to both drafting and consequential action" ], "reviewedAt": "2026-08-09" }, { "id": "concept:deterministic-containment", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/deterministic-containment", "index": "15", "title": "Deterministic containment", "shortTitle": "Containment", "thesis": "Probabilistic decisions must terminate inside deterministic boundaries.", "definition": "The enforcement envelope outside the model: isolation, deny-by-default access, typed allowlists, quotas, transaction ceilings, network boundaries, timeouts, rollback, quarantine, and tested stop controls.", "maturity": "maturing", "maturityNote": "Isolation and policy primitives are established; agent-specific containment architectures are still converging.", "shift": { "from": "Ask the model to be careful", "to": "Make unsafe effects mechanically unreachable" }, "practices": [ "Default-deny tools, data, network, and credentials", "Validate every consequential action before effect", "Exercise rollback, quarantine, and kill paths independently" ], "failureModes": [ "Natural-language guardrails used as the only boundary", "A kill switch sharing the same compromised control path" ], "reviewedAt": "2026-08-09" }, { "id": "concept:runtime-policy-enforcement", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/runtime-policy-enforcement", "index": "16", "title": "Runtime policy enforcement", "shortTitle": "Policy", "thesis": "A policy observed after action is audit. A policy checked before effect is control.", "definition": "The pre-action decision and enforcement layer that evaluates identity, purpose, risk tier, tool, resource, data class, limits, approval state, and current evidence before allowing an agent action.", "maturity": "maturing", "maturityNote": "Distributed policy engines are established; agent-aware decision inputs and enforcement points are emerging.", "shift": { "from": "Post-hoc policy review", "to": "Policy at every action boundary" }, "practices": [ "Keep the policy decision outside the acting agent", "Version policy and record every decision input and result", "Fail closed when authority, evidence, or policy state is unavailable" ], "failureModes": [ "Detailed policy logs with no enforcement point", "Stale or unreachable policy silently causing fail-open behavior" ], "reviewedAt": "2026-08-09" }, { "id": "concept:agent-estate-governance", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/agent-estate-governance", "index": "17", "title": "Agent estate governance", "shortTitle": "Estate", "thesis": "Each agent can look acceptable while the unmanaged estate becomes ungovernable.", "definition": "Portfolio governance for discovering and registering every enterprise agent with its identity, sponsor, owner, purpose, risk tier, platform, models, tools, data, dependencies, status, value, and exceptions.", "maturity": "emerging", "maturityNote": "Agent registries are arriving, while cross-platform discovery and enforcement remain fragmented.", "shift": { "from": "Project-by-project inventory", "to": "A continuously governed agent estate" }, "practices": [ "Discover and register agents across every build surface", "Block ownerless, duplicate, expired, or unapproved agents", "Measure risk, value, control coverage, and exception debt as a portfolio" ], "failureModes": [ "Shadow agents operating outside inventory", "A registry that is stale, voluntary, or disconnected from enforcement" ], "reviewedAt": "2026-08-09" }, { "id": "concept:continuous-recertification-retirement", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/continuous-recertification-retirement", "index": "18", "title": "Continuous recertification & retirement", "shortTitle": "Lifecycle", "thesis": "Production authorization decays as owners, models, data, tools, and operating conditions change.", "definition": "Scheduled and event-driven reassessment that renews, restricts, transfers, suspends, or ends an agent’s authority—and verifiably revokes its identities, credentials, tools, dependencies, and retained data at retirement.", "maturity": "maturing", "maturityNote": "Access recertification is established; complete agent product-lifecycle governance is still developing.", "shift": { "from": "One-time launch approval", "to": "Expiring, continuously renewed authority" }, "practices": [ "Require an owner heartbeat and authorization expiry", "Trigger reassessment after change, drift, incident, or organizational transfer", "Prove credential revocation, dependency removal, and data disposition" ], "failureModes": [ "Dormant agents retaining valid credentials and integrations", "Ownership transfer assumed rather than explicitly authorized" ], "reviewedAt": "2026-08-09" }, { "id": "concept:instruction-data-trust-boundary", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/instruction-data-trust-boundary", "index": "19", "title": "Instruction–data trust boundary", "shortTitle": "Trust boundary", "thesis": "Untrusted data can look like instructions to a model; syntax must never decide authority.", "definition": "An architecture that distinguishes authoritative instructions from retrieved content, memory, tool results, and external data through provenance, trust labels, privilege separation, validation, and mediated action.", "maturity": "emerging", "maturityNote": "Prompt injection remains unsolved; layered controls reduce consequence but cannot perfectly classify intent.", "shift": { "from": "All context treated as text", "to": "Provenance-aware context trust zones" }, "practices": [ "Label origin, authority, and trust for model-visible content", "Never let retrieved content grant tools or permissions", "Isolate and independently validate actions induced by untrusted data" ], "failureModes": [ "Prompt-only filtering presented as a security boundary", "External content entering durable memory and later appearing trusted" ], "reviewedAt": "2026-08-09" }, { "id": "concept:agent-incident-response", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/agent-incident-response", "index": "20", "title": "Agent incident response", "shortTitle": "Response", "thesis": "Stop, revoke, quarantine, reconstruct, and reconcile must be designed before the first action.", "definition": "An agent-specific response discipline that detects unsafe behavior, contains execution, revokes authority, preserves evidence, reconciles external effects, involves accountable owners, restores safely, and converts incidents into controls and evaluations.", "maturity": "emerging", "maturityNote": "Incident response is established; playbooks for agent identity, memory, tools, and autonomous side effects are still forming.", "shift": { "from": "Generic application incident handling", "to": "Identity-, action-, and outcome-aware response" }, "practices": [ "Correlate intent, identity, tool, policy, approval, and outcome traces", "Rehearse revoke, quarantine, rollback, and human escalation paths", "Reconcile external effects and turn failures into regression evaluations" ], "failureModes": [ "Stopping one process while credentials or delegated tasks remain active", "Destroying the evidence needed to reconstruct scope and downstream impact" ], "reviewedAt": "2026-08-09" } ], "patterns": [ { "id": "pattern:bounded-delegation-envelope", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/patterns#bounded-delegation-envelope", "index": "P01", "title": "Bounded delegation envelope", "deck": "Give an agent a defined outcome, a constrained action surface, and an authority that expires.", "maturity": "scaling", "architecture": "Bind principal, sponsor, purpose, resources, tools, spend, duration, escalation, and stop conditions into one enforceable delegation contract.", "evidence": [ "Signed delegation contract", "Policy-decision log", "Tool-call and approval trace" ], "failureModes": [ "Borrowed user credentials", "Standing access after the task is complete" ], "reviewedAt": "2026-08-09" }, { "id": "pattern:generator-verifier-separation", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/patterns#generator-verifier-separation", "index": "P02", "title": "Generator–verifier separation", "deck": "Separate production of an answer from independent challenge of its claims, behavior, and side effects.", "maturity": "scaling", "architecture": "Route artifacts through deterministic checks, isolated evaluator agents, security probes, domain review, and a human decision authority proportionate to risk.", "evidence": [ "Verifier identity and version", "Evaluation results and challenged claims", "Disposition of disagreement" ], "failureModes": [ "A second model presented as an approval authority", "Verifier context copied from the builder" ], "reviewedAt": "2026-08-09" }, { "id": "pattern:evidence-first-delivery", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/patterns#evidence-first-delivery", "index": "P03", "title": "Evidence-first delivery", "deck": "Design the proof chain before agents begin producing the change.", "maturity": "scaling", "architecture": "Create an evidence contract that links intent, implementation, verification, authorization, release identity, runtime signals, and lifecycle decisions as work occurs.", "evidence": [ "Evidence manifest", "Artifact provenance", "Gate decision record" ], "failureModes": [ "Evidence assembled after approval", "Proof that cannot identify what actually ran" ], "reviewedAt": "2026-08-09" }, { "id": "pattern:context-manifest", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/patterns#context-manifest", "index": "P04", "title": "Context manifest", "deck": "Treat model-visible state as a versioned, testable runtime dependency.", "maturity": "frontier", "architecture": "Declare instructions, knowledge sources, tools, memory, examples, freshness, trust level, redaction, token budget, and retrieval policy in a reviewable manifest.", "evidence": [ "Context manifest and hash", "Retrieval evaluation", "Provenance and redaction trace" ], "failureModes": [ "Prompt accumulation without ownership", "Untrusted content silently becoming instruction" ], "reviewedAt": "2026-08-09" }, { "id": "pattern:durable-run-ledger", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/patterns#durable-run-ledger", "index": "P05", "title": "Durable run ledger", "deck": "Make every consequential agent run attributable, replayable, and dispositioned.", "maturity": "frontier", "architecture": "Record goal, identity, delegation, context version, model and harness versions, tool effects, policy decisions, verifier findings, approvals, outcome, and final disposition in one linked ledger.", "evidence": [ "Run manifest", "Linked trace graph", "Outcome and incident disposition" ], "failureModes": [ "Telemetry without decision context", "Replay that silently calls live tools" ], "reviewedAt": "2026-08-09" }, { "id": "pattern:tool-contract-firewall", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/patterns#tool-contract-firewall", "index": "P06", "title": "Tool-contract firewall", "deck": "Put typed intent, policy, and effect checks between agent reasoning and enterprise action.", "maturity": "frontier", "architecture": "Wrap each consequential tool with typed schemas, identity checks, purpose binding, data policy, preconditions, effect preview, approval policy, idempotency, and postcondition verification.", "evidence": [ "Tool contract and version", "Pre- and postcondition record", "Approval and effect receipt" ], "failureModes": [ "One tool combines inspection and mutation", "Successful API status treated as a successful business outcome" ], "reviewedAt": "2026-08-09" }, { "id": "pattern:risk-adaptive-autonomy", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/patterns#risk-adaptive-autonomy", "index": "P07", "title": "Risk-adaptive autonomy", "deck": "Increase or reduce agent freedom from observed risk, evidence quality, and runtime state—not optimism.", "maturity": "frontier", "architecture": "Map risk tier and runtime health to allowed tools, transaction limits, review depth, human checkpoints, rate limits, and automatic fallback modes.", "evidence": [ "Autonomy profile", "Promotion or degradation decision", "Current operating envelope" ], "failureModes": [ "Autonomy ratchets upward but never back down", "Human approval applied to every trivial step until attention collapses" ], "reviewedAt": "2026-08-09" }, { "id": "pattern:agent-identity-lifecycle", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/patterns#agent-identity-lifecycle", "index": "P08", "title": "Agent identity lifecycle", "deck": "An agent without a current purpose and accountable owner must not retain production authority.", "maturity": "scaling", "architecture": "Register each agent with sponsor, owner, purpose, tier, versions, tools, data, deployment, review date, status, and kill authority; recertify or suspend on material change.", "evidence": [ "Agent system record", "Recertification decision", "Revocation and retirement receipt" ], "failureModes": [ "Orphan agents with valid credentials", "Retired systems that still receive events" ], "reviewedAt": "2026-08-09" } ], "blueprints": [ { "id": "blueprint:first-bounded-coding-agent", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/blueprints#first-bounded-coding-agent", "index": "B01", "title": "First bounded coding agent", "outcome": "Move a team from ad hoc coding assistance to repeatable, reviewable agent delivery.", "riskTier": "T2", "stopConditions": [ "Agent attempts to access a repository or credential outside the delegation envelope", "Tests or verifier findings cannot be reconciled", "The change modifies deployment, identity, secrets, or protected data paths" ], "reviewedAt": "2026-08-09" }, { "id": "blueprint:regulated-read-only-agent", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/blueprints#regulated-read-only-agent", "index": "B02", "title": "Regulated read-only knowledge agent", "outcome": "Provide sourced answers over protected enterprise knowledge without granting transactional authority.", "riskTier": "T3", "stopConditions": [ "Unattributed or inaccessible source content enters context", "The agent begins recommending consequential member actions", "Leakage, injection, or unsupported-claim thresholds are exceeded" ], "reviewedAt": "2026-08-09" }, { "id": "blueprint:transactional-agent-with-approval", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/blueprints#transactional-agent-with-approval", "index": "B03", "title": "Transactional agent with approval authority", "outcome": "Let an agent prepare and propose a business transaction while a named human authorizes commitment.", "riskTier": "T3", "stopConditions": [ "The proposal changes after authorization", "A tool cannot preview or idempotently execute the effect", "The expected postcondition cannot be verified" ], "reviewedAt": "2026-08-09" }, { "id": "blueprint:consequential-member-impact-agent", "canonicalUrl": "https://aisdlc.ai/agentic-engineering/blueprints#consequential-member-impact-agent", "index": "B04", "title": "Consequential member-impact agent", "outcome": "Bound an agent that can influence benefits, eligibility, coverage, payment, clinical, or member outcomes.", "riskTier": "T4", "stopConditions": [ "The agent exceeds an approved decision right or action limit", "Outcome disparity, safety, or appeal signals cross a defined threshold", "Owner, verifier baseline, data, model, or operating purpose materially changes" ], "reviewedAt": "2026-08-09" } ], "sources": [ { "id": "source:openai-harness-engineering", "title": "Harness engineering: leveraging Codex in an agent-first world", "publisher": "OpenAI", "url": "https://openai.com/index/harness-engineering/", "publishedAt": "2026-02-11", "kind": "engineering", "note": "A production case study in designing repositories, tools, feedback loops, and environments for agent-first delivery." }, { "id": "source:openai-symphony", "title": "An open-source spec for Codex orchestration: Symphony", "publisher": "OpenAI", "url": "https://openai.com/index/open-source-codex-orchestration-symphony/", "publishedAt": "2026-04-27", "kind": "engineering", "note": "An orchestration specification that connects project work, isolated agent execution, and reviewable delivery state." }, { "id": "source:openai-monitoring", "title": "How we monitor internal coding agents for misalignment", "publisher": "OpenAI", "url": "https://openai.com/index/how-we-monitor-internal-coding-agents-misalignment/", "publishedAt": "2026-03-19", "kind": "engineering", "note": "A current account of monitoring powerful coding agents that can act inside consequential development environments." }, { "id": "source:openai-self-improving", "title": "Building self-improving tax agents with Codex", "publisher": "OpenAI", "url": "https://openai.com/index/building-self-improving-tax-agents-with-codex/", "publishedAt": "2026-05-27", "kind": "engineering", "note": "A feedback-loop pattern that turns practitioner corrections and production traces into evaluations and scoped engineering work." }, { "id": "source:anthropic-context", "title": "Effective context engineering for AI agents", "publisher": "Anthropic", "url": "https://www.anthropic.com/engineering/effective-context-engineering-for-ai-agents", "publishedAt": "2025-09-29", "kind": "engineering", "note": "A working model for treating model-visible context as a finite resource that must be selected and maintained." }, { "id": "source:anthropic-long-running-harness", "title": "Effective harnesses for long-running agents", "publisher": "Anthropic", "url": "https://www.anthropic.com/engineering/effective-harnesses-for-long-running-agents", "publishedAt": "2025-11-26", "kind": "engineering", "note": "Patterns for incremental progress and durable handoffs across context windows and extended execution." }, { "id": "source:anthropic-harness-design", "title": "Harness design for long-running application development", "publisher": "Anthropic", "url": "https://www.anthropic.com/engineering/harness-design-long-running-apps", "publishedAt": "2026-03-24", "kind": "engineering", "note": "A planner, generator, and evaluator architecture for multi-hour autonomous application development." }, { "id": "source:anthropic-managed-agents", "title": "Scaling Managed Agents: Decoupling the brain from the hands", "publisher": "Anthropic", "url": "https://www.anthropic.com/engineering/managed-agents", "publishedAt": "2026-04-08", "kind": "engineering", "note": "An architecture separating durable sessions and environment state from changing models and harnesses." }, { "id": "source:anthropic-evals", "title": "Demystifying evals for AI agents", "publisher": "Anthropic", "url": "https://www.anthropic.com/engineering/demystifying-evals-for-ai-agents", "publishedAt": "2026-01-09", "kind": "engineering", "note": "A practical treatment of evaluating trajectories, outcomes, graders, tasks, and agent-environment interaction." }, { "id": "source:anthropic-infrastructure-noise", "title": "Quantifying infrastructure noise in agentic coding evals", "publisher": "Anthropic", "url": "https://www.anthropic.com/engineering/infrastructure-noise", "publishedAt": "2026-02-05", "kind": "research", "note": "An empirical demonstration that resource configuration can materially alter agent benchmark results and must be treated as part of the evaluation system." }, { "id": "source:github-spec-driven", "title": "Spec-driven development with AI", "publisher": "GitHub", "url": "https://github.blog/ai-and-ml/generative-ai/spec-driven-development-with-ai-get-started-with-a-new-open-source-toolkit/", "publishedAt": "2025-09-02", "kind": "engineering", "note": "A structured specification-to-plan-to-task workflow for making intent durable and actionable by coding agents." }, { "id": "source:github-spec-persistence", "title": "Spec persistence models", "publisher": "GitHub Spec Kit", "url": "https://github.github.com/spec-kit/concepts/spec-persistence.html", "publishedAt": "2026-07", "kind": "engineering", "note": "Distinguishes spec-first, spec-anchored, and spec-as-source approaches without asserting one universal model." }, { "id": "source:nist-agent-identity", "title": "Identity and Authority for Software Agents concept paper", "publisher": "NIST NCCoE", "url": "https://www.nccoe.nist.gov/sites/default/files/2026-02/accelerating-the-adoption-of-software-and-ai-agent-identity-and-authorization-concept-paper.pdf", "publishedAt": "2026-02-05", "kind": "guidance", "note": "A concept paper exploring how established identity and authorization practices can apply to software and AI agents." }, { "id": "source:nist-agent-standards", "title": "AI Agent Standards Initiative", "publisher": "NIST", "url": "https://www.nist.gov/artificial-intelligence/ai-agent-standards-initiative", "publishedAt": "2026-02-17", "kind": "guidance", "note": "A standards initiative addressing secure, interoperable adoption of AI agents." }, { "id": "source:microsoft-agent-identities", "title": "What are agent identities?", "publisher": "Microsoft Entra", "url": "https://learn.microsoft.com/en-us/entra/agent-id/what-are-agent-identities", "publishedAt": "2026-06-15", "kind": "guidance", "note": "A current enterprise identity model distinguishing agents from people and conventional applications, including ownership, sponsorship, delegated rights, and auditability." }, { "id": "source:nist-benchmark-evals", "title": "Towards best practices for automated benchmark evaluations", "publisher": "NIST", "url": "https://www.nist.gov/news-events/news/2026/01/towards-best-practices-automated-benchmark-evaluations", "publishedAt": "2026-01-30", "kind": "guidance", "note": "Guidance on the integrity and limitations of automated benchmark evaluation practices." }, { "id": "source:nist-deployed-monitoring", "title": "Challenges in monitoring deployed AI systems", "publisher": "NIST CAISI", "url": "https://www.nist.gov/publications/challenges-monitoring-deployed-ai-systems-center-ai-standards-and-innovation", "publishedAt": "2026-03-06", "kind": "guidance", "note": "A current view of monitoring needs and limitations for deployed AI systems." }, { "id": "source:owasp-agentic-top10", "title": "OWASP Top 10 for Agentic Applications 2026", "publisher": "OWASP GenAI Security Project", "url": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/", "publishedAt": "2025-12", "kind": "guidance", "note": "A threat-oriented reference for goal hijacking, tool misuse, identity abuse, memory poisoning, and cascading agent failures." }, { "id": "source:owasp-memory", "title": "Memory Is a Feature. It Is Also an Attack Surface", "publisher": "OWASP GenAI Security Project", "url": "https://genai.owasp.org/2026/05/13/memory-is-a-feature-it-is-also-an-attack-surface/", "publishedAt": "2026-05-13", "kind": "engineering", "note": "A focused account of why persistent agent memory requires integrity, provenance, and poisoning defenses." }, { "id": "source:mcp-enterprise-auth", "title": "Enterprise-Managed Authorization for MCP", "publisher": "Model Context Protocol", "url": "https://blog.modelcontextprotocol.io/posts/enterprise-managed-auth/", "publishedAt": "2026-06-18", "kind": "protocol", "note": "An emerging authorization pattern for enterprise-managed agent access to MCP servers." }, { "id": "source:mcp-2026-release-candidate", "title": "Model Context Protocol 2026-07-28 release candidate", "publisher": "Model Context Protocol", "url": "https://blog.modelcontextprotocol.io/posts/2026-07-28-release-candidate/", "publishedAt": "2026-07-28", "kind": "protocol", "note": "A current protocol release candidate illustrating that agent-tool interoperability, authorization, and extension surfaces continue to evolve and require explicit version governance." }, { "id": "source:a2a-v1", "title": "Agent2Agent Protocol v1.0", "publisher": "A2A Project", "url": "https://a2a-protocol.org/latest/announcing-1.0/", "publishedAt": "2026-03", "kind": "protocol", "note": "A protocol milestone for interoperable communication and collaboration between agents." }, { "id": "source:google-agent-substrate", "title": "Agent Sandbox on GKE and Agent Substrate", "publisher": "Google Cloud", "url": "https://cloud.google.com/blog/products/containers-kubernetes/bringing-you-agent-sandbox-on-gke-and-agent-substrate", "publishedAt": "2026-05-20", "kind": "engineering", "note": "An agent-specific execution architecture emphasizing isolation, state, scheduling, and environment control." }, { "id": "source:opentelemetry-genai", "title": "GenAI observability", "publisher": "OpenTelemetry", "url": "https://opentelemetry.io/blog/2026/genai-observability/", "publishedAt": "2026-05-14", "kind": "standard", "note": "Developing semantic conventions for model and agent telemetry across traces, metrics, and events." }, { "id": "source:slsa-provenance", "title": "SLSA provenance specification v1.2", "publisher": "SLSA", "url": "https://slsa.dev/spec/v1.2/provenance", "publishedAt": "2026", "kind": "standard", "note": "An established software-supply-chain foundation for attributable build provenance." }, { "id": "source:karpathy-software-3", "title": "Software Is Changing (Again)", "publisher": "Andrej Karpathy", "url": "https://www.youtube.com/watch?v=LCEmiRjPEtQ", "publishedAt": "2025-06-17", "kind": "talk", "note": "A thought-leadership lens on natural language, neural networks, and changing software interfaces—not a formal standard." }, { "id": "source:google-dora-ai-development", "title": "DORA 2025 State of AI-assisted Software Development Report", "publisher": "Google Research / DORA", "url": "https://research.google/pubs/dora-2025-state-of-ai-assisted-software-development-report/", "publishedAt": "2025", "kind": "research", "note": "Large-sample research framing AI as an amplifier of the capabilities and dysfunctions already present in an engineering organization." }, { "id": "source:microsoft-agent-accountability", "title": "Define roles, responsibilities, and decision rights", "publisher": "Microsoft Agentic Center of Excellence", "url": "https://learn.microsoft.com/en-us/agents/center-of-excellence/roles-responsibilities", "publishedAt": "2026-07-14", "kind": "guidance", "note": "An operating model that assigns one accountable role per decision and distinguishes domain, platform, risk, and runtime responsibilities." }, { "id": "source:microsoft-agent-risk-governance", "title": "Govern agents by risk", "publisher": "Microsoft Agentic Center of Excellence", "url": "https://learn.microsoft.com/en-us/agents/center-of-excellence/govern-agents-risk", "publishedAt": "2026-07-14", "kind": "guidance", "note": "Current enterprise guidance for matching review depth, autonomy limits, release gates, logging, and incident planning to agent risk." }, { "id": "source:microsoft-agent-lifecycle", "title": "Manage the agent lifecycle", "publisher": "Microsoft Agentic Center of Excellence", "url": "https://learn.microsoft.com/en-us/agents/center-of-excellence/agent-lifecycle", "publishedAt": "2026-07-14", "kind": "guidance", "note": "A product-lifecycle model spanning intake, deployment, monitoring, improvement, ownership, evaluation, and deliberate retirement." }, { "id": "source:microsoft-agent-id-governance", "title": "Governing Agent Identities", "publisher": "Microsoft Entra ID Governance", "url": "https://learn.microsoft.com/en-us/entra/id-governance/agent-id-governance-overview", "publishedAt": "2026-06-16", "kind": "guidance", "note": "An identity-governance model for agent sponsors, access packages, ownership continuity, lifecycle workflows, and enable or disable decisions." }, { "id": "source:microsoft-agent-owners-sponsors", "title": "Administrative relationships in Microsoft Entra Agent ID", "publisher": "Microsoft Entra Agent ID", "url": "https://learn.microsoft.com/en-us/entra/agent-id/agent-owners-sponsors-managers", "publishedAt": "2026-04-08", "kind": "guidance", "note": "Separates technical ownership from business sponsorship and assigns sponsors lifecycle, access-review, and incident-response decisions." }, { "id": "source:owasp-agentic-security-state", "title": "State of Agentic AI Security and Governance 2.01", "publisher": "OWASP GenAI Security Project", "url": "https://genai.owasp.org/resource/state-of-agentic-ai-security-and-governance/", "publishedAt": "2026-06-01", "kind": "guidance", "note": "A current threat and governance synthesis covering instruction-data confusion, containment gaps, autonomous action, and agentic incident readiness." }, { "id": "source:opa-policy-enforcement", "title": "OPA Management APIs and Architecture", "publisher": "Open Policy Agent", "url": "https://www.openpolicyagent.org/docs/management-introduction", "publishedAt": "2026", "kind": "standard", "note": "An established policy-engine architecture for distributed enforcement, centrally managed policy bundles, decision logs, and enforcement telemetry." }, { "id": "source:nist-ai-rmf", "title": "Artificial Intelligence Risk Management Framework 1.0", "publisher": "NIST", "url": "https://www.nist.gov/itl/ai-risk-management-framework", "publishedAt": "2023-01-26", "kind": "standard", "note": "A consensus-based foundation for governing, mapping, measuring, and managing AI risk according to context, impact, and organizational priorities." }, { "id": "source:anthropic-building-effective-agents", "title": "Building effective agents", "publisher": "Anthropic", "url": "https://www.anthropic.com/engineering/building-effective-agents", "publishedAt": "2024-12-19", "kind": "engineering", "note": "A foundational distinction between fixed, code-orchestrated workflows and systems in which a model dynamically directs its process and tool use." }, { "id": "source:artificial-analysis-methodology", "title": "Language model benchmarking methodology", "publisher": "Artificial Analysis", "url": "https://artificialanalysis.ai/methodology/", "publishedAt": "2026-06", "kind": "research", "note": "A transparent methodology for comparing model quality, price, latency, throughput, and cost per task. Its composite indices are useful evidence, not a substitute for use-case-specific evaluation." }, { "id": "source:ai-engineer-velocity-sickness", "title": "Velocity Sickness: What Happens When Your Whole Team Gets 10x Faster", "publisher": "Matt Dailey · AI Engineer World's Fair", "url": "https://www.youtube.com/watch?v=Kz4QJmNrVXU", "publishedAt": "2026-08-09", "kind": "talk", "note": "A practitioner framing for the coordination pain that appears when individual generation accelerates faster than shared decisions, review, and integration. It is an attributed field term, not a clinical or validated organizational diagnosis." }, { "id": "source:dora-wip-limits", "title": "Work in process limits", "publisher": "DORA", "url": "https://dora.dev/capabilities/wip-limits/", "publishedAt": "2026", "kind": "guidance", "note": "Research-backed guidance for making work visible, limiting concurrent work to real capacity, and improving the most consequential constraint in the delivery system." }, { "id": "source:dora-small-batches", "title": "Working in small batches", "publisher": "DORA", "url": "https://dora.dev/capabilities/working-in-small-batches/", "publishedAt": "2025", "kind": "guidance", "note": "Guidance that connects smaller changes with faster feedback, easier review, and safer integration, including in AI-assisted delivery." }, { "id": "source:space-developer-productivity", "title": "The SPACE of Developer Productivity: There's more to it than you think", "publisher": "Microsoft Research / ACM Queue", "url": "https://www.microsoft.com/en-us/research/publication/the-space-of-developer-productivity-theres-more-to-it-than-you-think/", "publishedAt": "2021-02", "kind": "research", "note": "A multidimensional productivity framework spanning satisfaction, performance, activity, communication, and efficiency rather than reducing engineering value to one activity metric." }, { "id": "source:github-agent-pr-review", "title": "Agent pull requests are everywhere. Here's how to review them", "publisher": "GitHub", "url": "https://github.blog/ai-and-ml/generative-ai/agent-pull-requests-are-everywhere-heres-how-to-review-them/", "publishedAt": "2026-05-07", "kind": "engineering", "note": "A current practitioner account of agent-generated pull requests saturating review bandwidth and the continued need for contextual human judgment." }, { "id": "source:metr-developer-productivity-rct", "title": "Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivity", "publisher": "METR", "url": "https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/", "publishedAt": "2025-07-10", "kind": "research", "note": "A randomized study in one narrow setting that found experienced contributors took longer with early-2025 tools. The authors explicitly caution against generalizing the result to all developers, tools, repositories, or later model generations." } ], "lifecyclePhases": [ { "id": "phase:01", "title": "Intake & Classify", "purpose": "Establish purpose, ownership, impact, data sensitivity, autonomy, and reversibility before work begins.", "gate": "Use-case approval & risk classification" }, { "id": "phase:02", "title": "Define & Decompose", "purpose": "Separate bounded agent work from deterministic controls, human decisions, and escalation paths.", "gate": "Requirements & oversight approval" }, { "id": "phase:03", "title": "Architect & Threat Model", "purpose": "Design models, identities, tools, data flows, tenant boundaries, and intervention controls as one system.", "gate": "Architecture, data & privacy approval" }, { "id": "phase:04", "title": "Build in a Governed Workspace", "purpose": "Enable people and coding agents to build through approved repositories, models, tools, and traceable pipelines.", "gate": "Build integrity & artifact readiness" }, { "id": "phase:05", "title": "Verify, Validate & Red-Team", "purpose": "Independently challenge software, models, agent trajectories, data access, and business outcomes.", "gate": "Verifier disposition & evidence acceptance" }, { "id": "phase:06", "title": "Authorize & Deploy", "purpose": "Release only when evidence satisfies the policy and approval authorities attached to the risk tier.", "gate": "Human production authorization" }, { "id": "phase:07", "title": "Operate, Supervise & Control", "purpose": "Continuously supervise behavior, enforce policy, and intervene when quality, risk, or operating conditions change.", "gate": "Continuous runtime authorization" }, { "id": "phase:08", "title": "Recertify, Transfer & Retire", "purpose": "Confirm that every agent remains needed, owned, within its approved risk and control posture, and appropriately authorized throughout its life.", "gate": "Recertification or retirement approval" } ], "controls": [ { "id": "control:GOV-001", "title": "Registered use case and accountable owner", "domain": "Governance & accountability", "description": "Register the intended outcome, affected population, sponsor, and human owner before delivery begins.", "minimumTier": 1, "status": "reference" }, { "id": "control:GOV-002", "title": "Permissibility and impact screen", "domain": "Governance & accountability", "description": "Screen prohibited uses, affected parties, decision impact, autonomy, and reversibility before approval.", "minimumTier": 1, "status": "reference" }, { "id": "control:GOV-003", "title": "Decision rights and human oversight", "domain": "Governance & accountability", "description": "Define what the system may recommend or execute, what a human must authorize, and how exceptions escalate.", "minimumTier": 1, "status": "reference" }, { "id": "control:DAT-001", "title": "Data classification and authorization", "domain": "Data & privacy", "description": "Classify every data source and document its purpose, authority, lineage, retention, and approved boundary.", "minimumTier": 1, "status": "reference" }, { "id": "control:DAT-002", "title": "Restricted data and PHI boundary", "domain": "Data & privacy", "description": "Constrain restricted data and PHI to approved identities, services, regions, tenants, and permitted purposes.", "minimumTier": 2, "status": "reference" }, { "id": "control:ARC-001", "title": "Approved architecture and threat model", "domain": "Architecture & security", "description": "Review models, prompts, memory, tools, identities, APIs, data flows, misuse paths, and intervention controls together.", "minimumTier": 1, "status": "reference" }, { "id": "control:ARC-002", "title": "Dedicated identity and tool allowlist", "domain": "Architecture & security", "description": "Bind agent actions to a dedicated, least-privilege identity and explicitly approved tools and scopes.", "minimumTier": 3, "status": "reference" }, { "id": "control:BLD-001", "title": "Governed workspace and traceable change", "domain": "Build integrity", "description": "Build through approved repositories, model gateways, protected branches, and traceable delivery pipelines.", "minimumTier": 1, "status": "reference" }, { "id": "control:BLD-002", "title": "Software and AI provenance", "domain": "Build integrity", "description": "Record source, dependencies, models, prompts, tools, datasets, and signed build provenance for each candidate.", "minimumTier": 1, "status": "reference" }, { "id": "control:VER-001", "title": "Independent verification plan", "domain": "Independent verification", "description": "Define acceptance thresholds and assign verifiers who are independent from the human and agent builders.", "minimumTier": 1, "status": "reference" }, { "id": "control:VER-002", "title": "Privacy and leakage verification", "domain": "Independent verification", "description": "Challenge retrieval, prompts, outputs, logs, memory, and tenant boundaries for inappropriate disclosure.", "minimumTier": 2, "status": "reference" }, { "id": "control:VER-003", "title": "Action safety, rollback, and reconciliation", "domain": "Independent verification", "description": "Verify action boundaries, pre-action checks, transaction limits, idempotency, rollback, and outcome reconciliation.", "minimumTier": 3, "status": "reference" }, { "id": "control:VER-004", "title": "Consequential outcome validation", "domain": "Independent verification", "description": "Independently validate regulated logic, member impact, deterministic checks, human authority, and complete decision evidence.", "minimumTier": 4, "status": "reference" }, { "id": "control:AUT-001", "title": "Evidence-based production authorization", "domain": "Deployment authorization", "description": "Release only after required evidence, findings, permissions, rollback, and approval authorities satisfy the tier pathway.", "minimumTier": 1, "status": "reference" }, { "id": "control:AUT-002", "title": "Dual control and time-bound risk acceptance", "domain": "Deployment authorization", "description": "Require designated dual approval, explicit risk acceptance, restricted deployment, and expiring authorization.", "minimumTier": 4, "status": "reference" }, { "id": "control:RUN-001", "title": "End-to-end runtime observability", "domain": "Runtime control", "description": "Trace model, tool, data, policy, human approval, outcome, cost, and error signals through the complete workflow.", "minimumTier": 1, "status": "reference" }, { "id": "control:RUN-002", "title": "Runtime policy, quarantine, and kill switch", "domain": "Runtime control", "description": "Enforce action policy before execution and provide tested paths to restrict, quarantine, or stop the agent.", "minimumTier": 3, "status": "reference" }, { "id": "control:LIF-001", "title": "Recertification and owner heartbeat", "domain": "Lifecycle governance", "description": "Periodically and eventfully reconfirm purpose, owner, tier, models, data, permissions, controls, and authorization.", "minimumTier": 1, "status": "reference" }, { "id": "control:LIF-002", "title": "Controlled ownership transfer and retirement", "domain": "Lifecycle governance", "description": "Transfer accountability explicitly or revoke identities, credentials, tools, retained data, and dependent services at retirement.", "minimumTier": 1, "status": "reference" } ] }, "edges": [ { "type": "relatedTo", "from": "concept:agentic-engineering", "to": "concept:harness-engineering" }, { "type": "relatedTo", "from": "concept:agentic-engineering", "to": "concept:agent-identity" }, { "type": "relatedTo", "from": "concept:agentic-engineering", "to": "concept:evidence-engineering" }, { "type": "cites", "from": "concept:agentic-engineering", "to": "source:openai-harness-engineering" }, { "type": "cites", "from": "concept:agentic-engineering", "to": "source:karpathy-software-3" }, { "type": "cites", "from": "concept:agentic-engineering", "to": "source:google-dora-ai-development" }, { "type": "appliesInPhase", "from": "concept:agentic-engineering", "to": "phase:01" }, { "type": "appliesInPhase", "from": "concept:agentic-engineering", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:agentic-engineering", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:agentic-engineering", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:agentic-engineering", "to": "control:GOV-001" }, { "type": "implementsControl", "from": "concept:agentic-engineering", "to": "control:GOV-003" }, { "type": "implementsControl", "from": "concept:agentic-engineering", "to": "control:ARC-001" }, { "type": "implementsControl", "from": "concept:agentic-engineering", "to": "control:RUN-002" }, { "type": "relatedTo", "from": "concept:intent-engineering", "to": "concept:context-engineering" }, { "type": "relatedTo", "from": "concept:intent-engineering", "to": "concept:eval-driven-development" }, { "type": "relatedTo", "from": "concept:intent-engineering", "to": "concept:evidence-engineering" }, { "type": "cites", "from": "concept:intent-engineering", "to": "source:github-spec-driven" }, { "type": "cites", "from": "concept:intent-engineering", "to": "source:github-spec-persistence" }, { "type": "cites", "from": "concept:intent-engineering", "to": "source:openai-harness-engineering" }, { "type": "appliesInPhase", "from": "concept:intent-engineering", "to": "phase:01" }, { "type": "appliesInPhase", "from": "concept:intent-engineering", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:intent-engineering", "to": "phase:03" }, { "type": "implementsControl", "from": "concept:intent-engineering", "to": "control:GOV-001" }, { "type": "implementsControl", "from": "concept:intent-engineering", "to": "control:GOV-003" }, { "type": "implementsControl", "from": "concept:intent-engineering", "to": "control:ARC-001" }, { "type": "implementsControl", "from": "concept:intent-engineering", "to": "control:BLD-001" }, { "type": "relatedTo", "from": "concept:context-engineering", "to": "concept:durable-memory" }, { "type": "relatedTo", "from": "concept:context-engineering", "to": "concept:harness-engineering" }, { "type": "relatedTo", "from": "concept:context-engineering", "to": "concept:tools-and-protocols" }, { "type": "cites", "from": "concept:context-engineering", "to": "source:anthropic-context" }, { "type": "cites", "from": "concept:context-engineering", "to": "source:anthropic-long-running-harness" }, { "type": "cites", "from": "concept:context-engineering", "to": "source:owasp-memory" }, { "type": "appliesInPhase", "from": "concept:context-engineering", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:context-engineering", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:context-engineering", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:context-engineering", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:context-engineering", "to": "control:DAT-001" }, { "type": "implementsControl", "from": "concept:context-engineering", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "concept:context-engineering", "to": "control:VER-002" }, { "type": "relatedTo", "from": "concept:durable-memory", "to": "concept:context-engineering" }, { "type": "relatedTo", "from": "concept:durable-memory", "to": "concept:execution-substrate" }, { "type": "relatedTo", "from": "concept:durable-memory", "to": "concept:evidence-engineering" }, { "type": "cites", "from": "concept:durable-memory", "to": "source:anthropic-context" }, { "type": "cites", "from": "concept:durable-memory", "to": "source:anthropic-managed-agents" }, { "type": "cites", "from": "concept:durable-memory", "to": "source:owasp-memory" }, { "type": "appliesInPhase", "from": "concept:durable-memory", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:durable-memory", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:durable-memory", "to": "phase:07" }, { "type": "appliesInPhase", "from": "concept:durable-memory", "to": "phase:08" }, { "type": "implementsControl", "from": "concept:durable-memory", "to": "control:DAT-001" }, { "type": "implementsControl", "from": "concept:durable-memory", "to": "control:DAT-002" }, { "type": "implementsControl", "from": "concept:durable-memory", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "concept:durable-memory", "to": "control:LIF-002" }, { "type": "relatedTo", "from": "concept:harness-engineering", "to": "concept:context-engineering" }, { "type": "relatedTo", "from": "concept:harness-engineering", "to": "concept:execution-substrate" }, { "type": "relatedTo", "from": "concept:harness-engineering", "to": "concept:multi-agent-verification" }, { "type": "cites", "from": "concept:harness-engineering", "to": "source:openai-harness-engineering" }, { "type": "cites", "from": "concept:harness-engineering", "to": "source:anthropic-long-running-harness" }, { "type": "cites", "from": "concept:harness-engineering", "to": "source:anthropic-harness-design" }, { "type": "appliesInPhase", "from": "concept:harness-engineering", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:harness-engineering", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:harness-engineering", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:harness-engineering", "to": "phase:05" }, { "type": "implementsControl", "from": "concept:harness-engineering", "to": "control:ARC-001" }, { "type": "implementsControl", "from": "concept:harness-engineering", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "concept:harness-engineering", "to": "control:BLD-001" }, { "type": "implementsControl", "from": "concept:harness-engineering", "to": "control:VER-001" }, { "type": "relatedTo", "from": "concept:tools-and-protocols", "to": "concept:agent-identity" }, { "type": "relatedTo", "from": "concept:tools-and-protocols", "to": "concept:execution-substrate" }, { "type": "relatedTo", "from": "concept:tools-and-protocols", "to": "concept:context-engineering" }, { "type": "cites", "from": "concept:tools-and-protocols", "to": "source:mcp-enterprise-auth" }, { "type": "cites", "from": "concept:tools-and-protocols", "to": "source:a2a-v1" }, { "type": "cites", "from": "concept:tools-and-protocols", "to": "source:nist-agent-standards" }, { "type": "appliesInPhase", "from": "concept:tools-and-protocols", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:tools-and-protocols", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:tools-and-protocols", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:tools-and-protocols", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:tools-and-protocols", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "concept:tools-and-protocols", "to": "control:BLD-002" }, { "type": "implementsControl", "from": "concept:tools-and-protocols", "to": "control:VER-003" }, { "type": "implementsControl", "from": "concept:tools-and-protocols", "to": "control:RUN-001" }, { "type": "relatedTo", "from": "concept:execution-substrate", "to": "concept:harness-engineering" }, { "type": "relatedTo", "from": "concept:execution-substrate", "to": "concept:agent-identity" }, { "type": "relatedTo", "from": "concept:execution-substrate", "to": "concept:observability-control" }, { "type": "cites", "from": "concept:execution-substrate", "to": "source:google-agent-substrate" }, { "type": "cites", "from": "concept:execution-substrate", "to": "source:openai-harness-engineering" }, { "type": "cites", "from": "concept:execution-substrate", "to": "source:owasp-agentic-top10" }, { "type": "appliesInPhase", "from": "concept:execution-substrate", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:execution-substrate", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:execution-substrate", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:execution-substrate", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:execution-substrate", "to": "control:ARC-001" }, { "type": "implementsControl", "from": "concept:execution-substrate", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "concept:execution-substrate", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "concept:execution-substrate", "to": "control:RUN-002" }, { "type": "relatedTo", "from": "concept:agent-identity", "to": "concept:tools-and-protocols" }, { "type": "relatedTo", "from": "concept:agent-identity", "to": "concept:execution-substrate" }, { "type": "relatedTo", "from": "concept:agent-identity", "to": "concept:observability-control" }, { "type": "cites", "from": "concept:agent-identity", "to": "source:nist-agent-identity" }, { "type": "cites", "from": "concept:agent-identity", "to": "source:nist-agent-standards" }, { "type": "cites", "from": "concept:agent-identity", "to": "source:mcp-enterprise-auth" }, { "type": "appliesInPhase", "from": "concept:agent-identity", "to": "phase:01" }, { "type": "appliesInPhase", "from": "concept:agent-identity", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:agent-identity", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:agent-identity", "to": "phase:08" }, { "type": "implementsControl", "from": "concept:agent-identity", "to": "control:GOV-001" }, { "type": "implementsControl", "from": "concept:agent-identity", "to": "control:GOV-003" }, { "type": "implementsControl", "from": "concept:agent-identity", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "concept:agent-identity", "to": "control:LIF-001" }, { "type": "relatedTo", "from": "concept:multi-agent-verification", "to": "concept:eval-driven-development" }, { "type": "relatedTo", "from": "concept:multi-agent-verification", "to": "concept:evidence-engineering" }, { "type": "relatedTo", "from": "concept:multi-agent-verification", "to": "concept:agentic-engineering" }, { "type": "cites", "from": "concept:multi-agent-verification", "to": "source:anthropic-harness-design" }, { "type": "cites", "from": "concept:multi-agent-verification", "to": "source:anthropic-evals" }, { "type": "cites", "from": "concept:multi-agent-verification", "to": "source:nist-benchmark-evals" }, { "type": "appliesInPhase", "from": "concept:multi-agent-verification", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:multi-agent-verification", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:multi-agent-verification", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:multi-agent-verification", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:multi-agent-verification", "to": "control:VER-001" }, { "type": "implementsControl", "from": "concept:multi-agent-verification", "to": "control:VER-003" }, { "type": "implementsControl", "from": "concept:multi-agent-verification", "to": "control:VER-004" }, { "type": "implementsControl", "from": "concept:multi-agent-verification", "to": "control:AUT-002" }, { "type": "relatedTo", "from": "concept:eval-driven-development", "to": "concept:multi-agent-verification" }, { "type": "relatedTo", "from": "concept:eval-driven-development", "to": "concept:observability-control" }, { "type": "relatedTo", "from": "concept:eval-driven-development", "to": "concept:intent-engineering" }, { "type": "cites", "from": "concept:eval-driven-development", "to": "source:anthropic-evals" }, { "type": "cites", "from": "concept:eval-driven-development", "to": "source:nist-benchmark-evals" }, { "type": "cites", "from": "concept:eval-driven-development", "to": "source:openai-self-improving" }, { "type": "appliesInPhase", "from": "concept:eval-driven-development", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:eval-driven-development", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:eval-driven-development", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:eval-driven-development", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:eval-driven-development", "to": "control:VER-001" }, { "type": "implementsControl", "from": "concept:eval-driven-development", "to": "control:VER-003" }, { "type": "implementsControl", "from": "concept:eval-driven-development", "to": "control:VER-004" }, { "type": "implementsControl", "from": "concept:eval-driven-development", "to": "control:RUN-001" }, { "type": "relatedTo", "from": "concept:observability-control", "to": "concept:agent-identity" }, { "type": "relatedTo", "from": "concept:observability-control", "to": "concept:execution-substrate" }, { "type": "relatedTo", "from": "concept:observability-control", "to": "concept:evidence-engineering" }, { "type": "cites", "from": "concept:observability-control", "to": "source:nist-deployed-monitoring" }, { "type": "cites", "from": "concept:observability-control", "to": "source:opentelemetry-genai" }, { "type": "cites", "from": "concept:observability-control", "to": "source:openai-monitoring" }, { "type": "appliesInPhase", "from": "concept:observability-control", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:observability-control", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:observability-control", "to": "phase:07" }, { "type": "appliesInPhase", "from": "concept:observability-control", "to": "phase:08" }, { "type": "implementsControl", "from": "concept:observability-control", "to": "control:AUT-001" }, { "type": "implementsControl", "from": "concept:observability-control", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "concept:observability-control", "to": "control:RUN-002" }, { "type": "implementsControl", "from": "concept:observability-control", "to": "control:LIF-001" }, { "type": "relatedTo", "from": "concept:evidence-engineering", "to": "concept:intent-engineering" }, { "type": "relatedTo", "from": "concept:evidence-engineering", "to": "concept:multi-agent-verification" }, { "type": "relatedTo", "from": "concept:evidence-engineering", "to": "concept:observability-control" }, { "type": "cites", "from": "concept:evidence-engineering", "to": "source:slsa-provenance" }, { "type": "cites", "from": "concept:evidence-engineering", "to": "source:openai-harness-engineering" }, { "type": "cites", "from": "concept:evidence-engineering", "to": "source:openai-self-improving" }, { "type": "appliesInPhase", "from": "concept:evidence-engineering", "to": "phase:01" }, { "type": "appliesInPhase", "from": "concept:evidence-engineering", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:evidence-engineering", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:evidence-engineering", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:evidence-engineering", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:evidence-engineering", "to": "phase:07" }, { "type": "appliesInPhase", "from": "concept:evidence-engineering", "to": "phase:08" }, { "type": "implementsControl", "from": "concept:evidence-engineering", "to": "control:BLD-002" }, { "type": "implementsControl", "from": "concept:evidence-engineering", "to": "control:AUT-001" }, { "type": "implementsControl", "from": "concept:evidence-engineering", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "concept:evidence-engineering", "to": "control:LIF-002" }, { "type": "relatedTo", "from": "concept:human-accountability", "to": "concept:agent-identity" }, { "type": "relatedTo", "from": "concept:human-accountability", "to": "concept:risk-tiered-autonomy" }, { "type": "relatedTo", "from": "concept:human-accountability", "to": "concept:continuous-recertification-retirement" }, { "type": "cites", "from": "concept:human-accountability", "to": "source:microsoft-agent-accountability" }, { "type": "cites", "from": "concept:human-accountability", "to": "source:microsoft-agent-owners-sponsors" }, { "type": "cites", "from": "concept:human-accountability", "to": "source:nist-agent-identity" }, { "type": "appliesInPhase", "from": "concept:human-accountability", "to": "phase:01" }, { "type": "appliesInPhase", "from": "concept:human-accountability", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:human-accountability", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:human-accountability", "to": "phase:07" }, { "type": "appliesInPhase", "from": "concept:human-accountability", "to": "phase:08" }, { "type": "implementsControl", "from": "concept:human-accountability", "to": "control:GOV-001" }, { "type": "implementsControl", "from": "concept:human-accountability", "to": "control:GOV-003" }, { "type": "implementsControl", "from": "concept:human-accountability", "to": "control:AUT-001" }, { "type": "implementsControl", "from": "concept:human-accountability", "to": "control:LIF-001" }, { "type": "relatedTo", "from": "concept:risk-tiered-autonomy", "to": "concept:human-accountability" }, { "type": "relatedTo", "from": "concept:risk-tiered-autonomy", "to": "concept:agent-identity" }, { "type": "relatedTo", "from": "concept:risk-tiered-autonomy", "to": "concept:deterministic-containment" }, { "type": "cites", "from": "concept:risk-tiered-autonomy", "to": "source:microsoft-agent-risk-governance" }, { "type": "cites", "from": "concept:risk-tiered-autonomy", "to": "source:nist-ai-rmf" }, { "type": "cites", "from": "concept:risk-tiered-autonomy", "to": "source:nist-agent-identity" }, { "type": "appliesInPhase", "from": "concept:risk-tiered-autonomy", "to": "phase:01" }, { "type": "appliesInPhase", "from": "concept:risk-tiered-autonomy", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:risk-tiered-autonomy", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:risk-tiered-autonomy", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:risk-tiered-autonomy", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:risk-tiered-autonomy", "to": "control:GOV-002" }, { "type": "implementsControl", "from": "concept:risk-tiered-autonomy", "to": "control:GOV-003" }, { "type": "implementsControl", "from": "concept:risk-tiered-autonomy", "to": "control:VER-001" }, { "type": "implementsControl", "from": "concept:risk-tiered-autonomy", "to": "control:AUT-002" }, { "type": "relatedTo", "from": "concept:deterministic-containment", "to": "concept:execution-substrate" }, { "type": "relatedTo", "from": "concept:deterministic-containment", "to": "concept:runtime-policy-enforcement" }, { "type": "relatedTo", "from": "concept:deterministic-containment", "to": "concept:agent-incident-response" }, { "type": "cites", "from": "concept:deterministic-containment", "to": "source:google-agent-substrate" }, { "type": "cites", "from": "concept:deterministic-containment", "to": "source:owasp-agentic-security-state" }, { "type": "cites", "from": "concept:deterministic-containment", "to": "source:opa-policy-enforcement" }, { "type": "appliesInPhase", "from": "concept:deterministic-containment", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:deterministic-containment", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:deterministic-containment", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:deterministic-containment", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:deterministic-containment", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:deterministic-containment", "to": "control:ARC-001" }, { "type": "implementsControl", "from": "concept:deterministic-containment", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "concept:deterministic-containment", "to": "control:VER-003" }, { "type": "implementsControl", "from": "concept:deterministic-containment", "to": "control:RUN-002" }, { "type": "relatedTo", "from": "concept:runtime-policy-enforcement", "to": "concept:observability-control" }, { "type": "relatedTo", "from": "concept:runtime-policy-enforcement", "to": "concept:deterministic-containment" }, { "type": "relatedTo", "from": "concept:runtime-policy-enforcement", "to": "concept:evidence-engineering" }, { "type": "cites", "from": "concept:runtime-policy-enforcement", "to": "source:opa-policy-enforcement" }, { "type": "cites", "from": "concept:runtime-policy-enforcement", "to": "source:nist-deployed-monitoring" }, { "type": "cites", "from": "concept:runtime-policy-enforcement", "to": "source:microsoft-agent-risk-governance" }, { "type": "appliesInPhase", "from": "concept:runtime-policy-enforcement", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:runtime-policy-enforcement", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:runtime-policy-enforcement", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:runtime-policy-enforcement", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:runtime-policy-enforcement", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "concept:runtime-policy-enforcement", "to": "control:VER-003" }, { "type": "implementsControl", "from": "concept:runtime-policy-enforcement", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "concept:runtime-policy-enforcement", "to": "control:RUN-002" }, { "type": "relatedTo", "from": "concept:agent-estate-governance", "to": "concept:agent-identity" }, { "type": "relatedTo", "from": "concept:agent-estate-governance", "to": "concept:continuous-recertification-retirement" }, { "type": "relatedTo", "from": "concept:agent-estate-governance", "to": "concept:agent-incident-response" }, { "type": "cites", "from": "concept:agent-estate-governance", "to": "source:microsoft-agent-lifecycle" }, { "type": "cites", "from": "concept:agent-estate-governance", "to": "source:microsoft-agent-id-governance" }, { "type": "cites", "from": "concept:agent-estate-governance", "to": "source:nist-agent-identity" }, { "type": "appliesInPhase", "from": "concept:agent-estate-governance", "to": "phase:01" }, { "type": "appliesInPhase", "from": "concept:agent-estate-governance", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:agent-estate-governance", "to": "phase:07" }, { "type": "appliesInPhase", "from": "concept:agent-estate-governance", "to": "phase:08" }, { "type": "implementsControl", "from": "concept:agent-estate-governance", "to": "control:GOV-001" }, { "type": "implementsControl", "from": "concept:agent-estate-governance", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "concept:agent-estate-governance", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "concept:agent-estate-governance", "to": "control:LIF-001" }, { "type": "implementsControl", "from": "concept:agent-estate-governance", "to": "control:LIF-002" }, { "type": "relatedTo", "from": "concept:continuous-recertification-retirement", "to": "concept:agent-estate-governance" }, { "type": "relatedTo", "from": "concept:continuous-recertification-retirement", "to": "concept:agent-identity" }, { "type": "relatedTo", "from": "concept:continuous-recertification-retirement", "to": "concept:evidence-engineering" }, { "type": "cites", "from": "concept:continuous-recertification-retirement", "to": "source:microsoft-agent-lifecycle" }, { "type": "cites", "from": "concept:continuous-recertification-retirement", "to": "source:microsoft-agent-id-governance" }, { "type": "cites", "from": "concept:continuous-recertification-retirement", "to": "source:microsoft-agent-owners-sponsors" }, { "type": "appliesInPhase", "from": "concept:continuous-recertification-retirement", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:continuous-recertification-retirement", "to": "phase:07" }, { "type": "appliesInPhase", "from": "concept:continuous-recertification-retirement", "to": "phase:08" }, { "type": "implementsControl", "from": "concept:continuous-recertification-retirement", "to": "control:AUT-002" }, { "type": "implementsControl", "from": "concept:continuous-recertification-retirement", "to": "control:RUN-002" }, { "type": "implementsControl", "from": "concept:continuous-recertification-retirement", "to": "control:LIF-001" }, { "type": "implementsControl", "from": "concept:continuous-recertification-retirement", "to": "control:LIF-002" }, { "type": "relatedTo", "from": "concept:instruction-data-trust-boundary", "to": "concept:context-engineering" }, { "type": "relatedTo", "from": "concept:instruction-data-trust-boundary", "to": "concept:durable-memory" }, { "type": "relatedTo", "from": "concept:instruction-data-trust-boundary", "to": "concept:deterministic-containment" }, { "type": "cites", "from": "concept:instruction-data-trust-boundary", "to": "source:owasp-agentic-security-state" }, { "type": "cites", "from": "concept:instruction-data-trust-boundary", "to": "source:owasp-agentic-top10" }, { "type": "cites", "from": "concept:instruction-data-trust-boundary", "to": "source:anthropic-context" }, { "type": "appliesInPhase", "from": "concept:instruction-data-trust-boundary", "to": "phase:02" }, { "type": "appliesInPhase", "from": "concept:instruction-data-trust-boundary", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:instruction-data-trust-boundary", "to": "phase:04" }, { "type": "appliesInPhase", "from": "concept:instruction-data-trust-boundary", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:instruction-data-trust-boundary", "to": "phase:07" }, { "type": "implementsControl", "from": "concept:instruction-data-trust-boundary", "to": "control:DAT-001" }, { "type": "implementsControl", "from": "concept:instruction-data-trust-boundary", "to": "control:DAT-002" }, { "type": "implementsControl", "from": "concept:instruction-data-trust-boundary", "to": "control:ARC-001" }, { "type": "implementsControl", "from": "concept:instruction-data-trust-boundary", "to": "control:VER-002" }, { "type": "implementsControl", "from": "concept:instruction-data-trust-boundary", "to": "control:RUN-002" }, { "type": "relatedTo", "from": "concept:agent-incident-response", "to": "concept:observability-control" }, { "type": "relatedTo", "from": "concept:agent-incident-response", "to": "concept:deterministic-containment" }, { "type": "relatedTo", "from": "concept:agent-incident-response", "to": "concept:agent-estate-governance" }, { "type": "cites", "from": "concept:agent-incident-response", "to": "source:owasp-agentic-security-state" }, { "type": "cites", "from": "concept:agent-incident-response", "to": "source:microsoft-agent-risk-governance" }, { "type": "cites", "from": "concept:agent-incident-response", "to": "source:microsoft-agent-owners-sponsors" }, { "type": "cites", "from": "concept:agent-incident-response", "to": "source:openai-monitoring" }, { "type": "appliesInPhase", "from": "concept:agent-incident-response", "to": "phase:03" }, { "type": "appliesInPhase", "from": "concept:agent-incident-response", "to": "phase:05" }, { "type": "appliesInPhase", "from": "concept:agent-incident-response", "to": "phase:06" }, { "type": "appliesInPhase", "from": "concept:agent-incident-response", "to": "phase:07" }, { "type": "appliesInPhase", "from": "concept:agent-incident-response", "to": "phase:08" }, { "type": "implementsControl", "from": "concept:agent-incident-response", "to": "control:GOV-003" }, { "type": "implementsControl", "from": "concept:agent-incident-response", "to": "control:VER-003" }, { "type": "implementsControl", "from": "concept:agent-incident-response", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "concept:agent-incident-response", "to": "control:RUN-002" }, { "type": "implementsControl", "from": "concept:agent-incident-response", "to": "control:LIF-001" }, { "type": "realizesConcept", "from": "pattern:bounded-delegation-envelope", "to": "concept:agent-identity" }, { "type": "realizesConcept", "from": "pattern:bounded-delegation-envelope", "to": "concept:tools-and-protocols" }, { "type": "realizesConcept", "from": "pattern:bounded-delegation-envelope", "to": "concept:observability-control" }, { "type": "cites", "from": "pattern:bounded-delegation-envelope", "to": "source:nist-agent-identity" }, { "type": "cites", "from": "pattern:bounded-delegation-envelope", "to": "source:mcp-enterprise-auth" }, { "type": "cites", "from": "pattern:bounded-delegation-envelope", "to": "source:microsoft-agent-identities" }, { "type": "appliesInPhase", "from": "pattern:bounded-delegation-envelope", "to": "phase:01" }, { "type": "appliesInPhase", "from": "pattern:bounded-delegation-envelope", "to": "phase:03" }, { "type": "appliesInPhase", "from": "pattern:bounded-delegation-envelope", "to": "phase:06" }, { "type": "appliesInPhase", "from": "pattern:bounded-delegation-envelope", "to": "phase:07" }, { "type": "appliesInPhase", "from": "pattern:bounded-delegation-envelope", "to": "phase:08" }, { "type": "implementsControl", "from": "pattern:bounded-delegation-envelope", "to": "control:GOV-001" }, { "type": "implementsControl", "from": "pattern:bounded-delegation-envelope", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "pattern:bounded-delegation-envelope", "to": "control:AUT-001" }, { "type": "implementsControl", "from": "pattern:bounded-delegation-envelope", "to": "control:LIF-001" }, { "type": "realizesConcept", "from": "pattern:generator-verifier-separation", "to": "concept:multi-agent-verification" }, { "type": "realizesConcept", "from": "pattern:generator-verifier-separation", "to": "concept:eval-driven-development" }, { "type": "realizesConcept", "from": "pattern:generator-verifier-separation", "to": "concept:evidence-engineering" }, { "type": "cites", "from": "pattern:generator-verifier-separation", "to": "source:anthropic-harness-design" }, { "type": "cites", "from": "pattern:generator-verifier-separation", "to": "source:anthropic-evals" }, { "type": "cites", "from": "pattern:generator-verifier-separation", "to": "source:nist-benchmark-evals" }, { "type": "appliesInPhase", "from": "pattern:generator-verifier-separation", "to": "phase:02" }, { "type": "appliesInPhase", "from": "pattern:generator-verifier-separation", "to": "phase:04" }, { "type": "appliesInPhase", "from": "pattern:generator-verifier-separation", "to": "phase:05" }, { "type": "appliesInPhase", "from": "pattern:generator-verifier-separation", "to": "phase:06" }, { "type": "appliesInPhase", "from": "pattern:generator-verifier-separation", "to": "phase:07" }, { "type": "implementsControl", "from": "pattern:generator-verifier-separation", "to": "control:VER-001" }, { "type": "implementsControl", "from": "pattern:generator-verifier-separation", "to": "control:VER-003" }, { "type": "implementsControl", "from": "pattern:generator-verifier-separation", "to": "control:VER-004" }, { "type": "implementsControl", "from": "pattern:generator-verifier-separation", "to": "control:AUT-002" }, { "type": "realizesConcept", "from": "pattern:evidence-first-delivery", "to": "concept:evidence-engineering" }, { "type": "realizesConcept", "from": "pattern:evidence-first-delivery", "to": "concept:intent-engineering" }, { "type": "realizesConcept", "from": "pattern:evidence-first-delivery", "to": "concept:observability-control" }, { "type": "cites", "from": "pattern:evidence-first-delivery", "to": "source:slsa-provenance" }, { "type": "cites", "from": "pattern:evidence-first-delivery", "to": "source:openai-harness-engineering" }, { "type": "cites", "from": "pattern:evidence-first-delivery", "to": "source:openai-self-improving" }, { "type": "appliesInPhase", "from": "pattern:evidence-first-delivery", "to": "phase:01" }, { "type": "appliesInPhase", "from": "pattern:evidence-first-delivery", "to": "phase:02" }, { "type": "appliesInPhase", "from": "pattern:evidence-first-delivery", "to": "phase:04" }, { "type": "appliesInPhase", "from": "pattern:evidence-first-delivery", "to": "phase:05" }, { "type": "appliesInPhase", "from": "pattern:evidence-first-delivery", "to": "phase:06" }, { "type": "appliesInPhase", "from": "pattern:evidence-first-delivery", "to": "phase:07" }, { "type": "appliesInPhase", "from": "pattern:evidence-first-delivery", "to": "phase:08" }, { "type": "implementsControl", "from": "pattern:evidence-first-delivery", "to": "control:GOV-003" }, { "type": "implementsControl", "from": "pattern:evidence-first-delivery", "to": "control:BLD-002" }, { "type": "implementsControl", "from": "pattern:evidence-first-delivery", "to": "control:AUT-001" }, { "type": "implementsControl", "from": "pattern:evidence-first-delivery", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "pattern:evidence-first-delivery", "to": "control:LIF-002" }, { "type": "realizesConcept", "from": "pattern:context-manifest", "to": "concept:context-engineering" }, { "type": "realizesConcept", "from": "pattern:context-manifest", "to": "concept:durable-memory" }, { "type": "realizesConcept", "from": "pattern:context-manifest", "to": "concept:intent-engineering" }, { "type": "cites", "from": "pattern:context-manifest", "to": "source:anthropic-context" }, { "type": "cites", "from": "pattern:context-manifest", "to": "source:anthropic-long-running-harness" }, { "type": "cites", "from": "pattern:context-manifest", "to": "source:owasp-memory" }, { "type": "appliesInPhase", "from": "pattern:context-manifest", "to": "phase:02" }, { "type": "appliesInPhase", "from": "pattern:context-manifest", "to": "phase:03" }, { "type": "appliesInPhase", "from": "pattern:context-manifest", "to": "phase:04" }, { "type": "appliesInPhase", "from": "pattern:context-manifest", "to": "phase:05" }, { "type": "appliesInPhase", "from": "pattern:context-manifest", "to": "phase:07" }, { "type": "implementsControl", "from": "pattern:context-manifest", "to": "control:DAT-001" }, { "type": "implementsControl", "from": "pattern:context-manifest", "to": "control:DAT-002" }, { "type": "implementsControl", "from": "pattern:context-manifest", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "pattern:context-manifest", "to": "control:VER-002" }, { "type": "realizesConcept", "from": "pattern:durable-run-ledger", "to": "concept:observability-control" }, { "type": "realizesConcept", "from": "pattern:durable-run-ledger", "to": "concept:evidence-engineering" }, { "type": "realizesConcept", "from": "pattern:durable-run-ledger", "to": "concept:execution-substrate" }, { "type": "cites", "from": "pattern:durable-run-ledger", "to": "source:opentelemetry-genai" }, { "type": "cites", "from": "pattern:durable-run-ledger", "to": "source:openai-monitoring" }, { "type": "cites", "from": "pattern:durable-run-ledger", "to": "source:slsa-provenance" }, { "type": "appliesInPhase", "from": "pattern:durable-run-ledger", "to": "phase:04" }, { "type": "appliesInPhase", "from": "pattern:durable-run-ledger", "to": "phase:05" }, { "type": "appliesInPhase", "from": "pattern:durable-run-ledger", "to": "phase:06" }, { "type": "appliesInPhase", "from": "pattern:durable-run-ledger", "to": "phase:07" }, { "type": "appliesInPhase", "from": "pattern:durable-run-ledger", "to": "phase:08" }, { "type": "implementsControl", "from": "pattern:durable-run-ledger", "to": "control:AUT-001" }, { "type": "implementsControl", "from": "pattern:durable-run-ledger", "to": "control:RUN-001" }, { "type": "implementsControl", "from": "pattern:durable-run-ledger", "to": "control:RUN-002" }, { "type": "implementsControl", "from": "pattern:durable-run-ledger", "to": "control:LIF-002" }, { "type": "realizesConcept", "from": "pattern:tool-contract-firewall", "to": "concept:tools-and-protocols" }, { "type": "realizesConcept", "from": "pattern:tool-contract-firewall", "to": "concept:agent-identity" }, { "type": "realizesConcept", "from": "pattern:tool-contract-firewall", "to": "concept:eval-driven-development" }, { "type": "cites", "from": "pattern:tool-contract-firewall", "to": "source:mcp-enterprise-auth" }, { "type": "cites", "from": "pattern:tool-contract-firewall", "to": "source:a2a-v1" }, { "type": "cites", "from": "pattern:tool-contract-firewall", "to": "source:owasp-agentic-top10" }, { "type": "appliesInPhase", "from": "pattern:tool-contract-firewall", "to": "phase:03" }, { "type": "appliesInPhase", "from": "pattern:tool-contract-firewall", "to": "phase:04" }, { "type": "appliesInPhase", "from": "pattern:tool-contract-firewall", "to": "phase:05" }, { "type": "appliesInPhase", "from": "pattern:tool-contract-firewall", "to": "phase:06" }, { "type": "appliesInPhase", "from": "pattern:tool-contract-firewall", "to": "phase:07" }, { "type": "implementsControl", "from": "pattern:tool-contract-firewall", "to": "control:ARC-002" }, { "type": "implementsControl", "from": "pattern:tool-contract-firewall", "to": "control:BLD-002" }, { "type": "implementsControl", "from": "pattern:tool-contract-firewall", "to": "control:VER-003" }, { "type": "implementsControl", "from": "pattern:tool-contract-firewall", "to": "control:AUT-001" }, { "type": "realizesConcept", "from": "pattern:risk-adaptive-autonomy", "to": "concept:observability-control" }, { "type": "realizesConcept", "from": "pattern:risk-adaptive-autonomy", "to": "concept:agent-identity" }, { "type": "realizesConcept", "from": "pattern:risk-adaptive-autonomy", "to": "concept:eval-driven-development" }, { "type": "cites", "from": "pattern:risk-adaptive-autonomy", "to": "source:nist-deployed-monitoring" }, { "type": "cites", "from": "pattern:risk-adaptive-autonomy", "to": "source:openai-monitoring" }, { "type": "cites", "from": "pattern:risk-adaptive-autonomy", "to": "source:anthropic-evals" }, { "type": "appliesInPhase", "from": "pattern:risk-adaptive-autonomy", "to": "phase:01" }, { "type": "appliesInPhase", "from": "pattern:risk-adaptive-autonomy", "to": "phase:05" }, { "type": "appliesInPhase", "from": "pattern:risk-adaptive-autonomy", "to": "phase:06" }, { "type": "appliesInPhase", "from": "pattern:risk-adaptive-autonomy", "to": "phase:07" }, { "type": "appliesInPhase", "from": "pattern:risk-adaptive-autonomy", "to": "phase:08" }, { "type": "implementsControl", "from": "pattern:risk-adaptive-autonomy", "to": "control:GOV-002" }, { "type": "implementsControl", "from": "pattern:risk-adaptive-autonomy", "to": "control:AUT-001" }, { "type": "implementsControl", "from": "pattern:risk-adaptive-autonomy", "to": "control:AUT-002" }, { "type": "implementsControl", "from": "pattern:risk-adaptive-autonomy", "to": "control:RUN-002" }, { "type": "implementsControl", "from": "pattern:risk-adaptive-autonomy", "to": "control:LIF-001" }, { "type": "realizesConcept", "from": "pattern:agent-identity-lifecycle", "to": "concept:agent-identity" }, { "type": "realizesConcept", "from": "pattern:agent-identity-lifecycle", "to": "concept:observability-control" }, { "type": "realizesConcept", "from": "pattern:agent-identity-lifecycle", "to": "concept:evidence-engineering" }, { "type": "cites", "from": "pattern:agent-identity-lifecycle", "to": "source:nist-agent-identity" }, { "type": "cites", "from": "pattern:agent-identity-lifecycle", "to": "source:microsoft-agent-identities" }, { "type": "cites", "from": "pattern:agent-identity-lifecycle", "to": "source:nist-agent-standards" }, { "type": "appliesInPhase", "from": "pattern:agent-identity-lifecycle", "to": "phase:01" }, { "type": "appliesInPhase", "from": "pattern:agent-identity-lifecycle", "to": "phase:03" }, { "type": "appliesInPhase", "from": "pattern:agent-identity-lifecycle", "to": "phase:06" }, { "type": "appliesInPhase", "from": "pattern:agent-identity-lifecycle", "to": "phase:07" }, { "type": "appliesInPhase", "from": "pattern:agent-identity-lifecycle", "to": "phase:08" }, { "type": "implementsControl", "from": "pattern:agent-identity-lifecycle", "to": "control:GOV-001" }, { "type": "implementsControl", "from": "pattern:agent-identity-lifecycle", "to": "control:GOV-002" }, { "type": "implementsControl", "from": "pattern:agent-identity-lifecycle", "to": "control:LIF-001" }, { "type": "implementsControl", "from": "pattern:agent-identity-lifecycle", "to": "control:LIF-002" }, { "type": "usesConcept", "from": "blueprint:first-bounded-coding-agent", "to": "concept:harness-engineering" }, { "type": "usesConcept", "from": "blueprint:first-bounded-coding-agent", "to": "concept:multi-agent-verification" }, { "type": "usesConcept", "from": "blueprint:first-bounded-coding-agent", "to": "concept:evidence-engineering" }, { "type": "requiresControl", "from": "blueprint:first-bounded-coding-agent", "to": "control:GOV-001" }, { "type": "requiresControl", "from": "blueprint:first-bounded-coding-agent", "to": "control:ARC-001" }, { "type": "requiresControl", "from": "blueprint:first-bounded-coding-agent", "to": "control:BLD-001" }, { "type": "requiresControl", "from": "blueprint:first-bounded-coding-agent", "to": "control:VER-001" }, { "type": "requiresControl", "from": "blueprint:first-bounded-coding-agent", "to": "control:AUT-002" }, { "type": "usesConcept", "from": "blueprint:regulated-read-only-agent", "to": "concept:context-engineering" }, { "type": "usesConcept", "from": "blueprint:regulated-read-only-agent", "to": "concept:durable-memory" }, { "type": "usesConcept", "from": "blueprint:regulated-read-only-agent", "to": "concept:eval-driven-development" }, { "type": "requiresControl", "from": "blueprint:regulated-read-only-agent", "to": "control:GOV-002" }, { "type": "requiresControl", "from": "blueprint:regulated-read-only-agent", "to": "control:DAT-001" }, { "type": "requiresControl", "from": "blueprint:regulated-read-only-agent", "to": "control:DAT-002" }, { "type": "requiresControl", "from": "blueprint:regulated-read-only-agent", "to": "control:VER-002" }, { "type": "requiresControl", "from": "blueprint:regulated-read-only-agent", "to": "control:VER-004" }, { "type": "requiresControl", "from": "blueprint:regulated-read-only-agent", "to": "control:RUN-001" }, { "type": "usesConcept", "from": "blueprint:transactional-agent-with-approval", "to": "concept:tools-and-protocols" }, { "type": "usesConcept", "from": "blueprint:transactional-agent-with-approval", "to": "concept:agent-identity" }, { "type": "usesConcept", "from": "blueprint:transactional-agent-with-approval", "to": "concept:observability-control" }, { "type": "requiresControl", "from": "blueprint:transactional-agent-with-approval", "to": "control:ARC-002" }, { "type": "requiresControl", "from": "blueprint:transactional-agent-with-approval", "to": "control:BLD-002" }, { "type": "requiresControl", "from": "blueprint:transactional-agent-with-approval", "to": "control:VER-003" }, { "type": "requiresControl", "from": "blueprint:transactional-agent-with-approval", "to": "control:AUT-001" }, { "type": "requiresControl", "from": "blueprint:transactional-agent-with-approval", "to": "control:AUT-002" }, { "type": "requiresControl", "from": "blueprint:transactional-agent-with-approval", "to": "control:RUN-002" }, { "type": "usesConcept", "from": "blueprint:consequential-member-impact-agent", "to": "concept:agentic-engineering" }, { "type": "usesConcept", "from": "blueprint:consequential-member-impact-agent", "to": "concept:multi-agent-verification" }, { "type": "usesConcept", "from": "blueprint:consequential-member-impact-agent", "to": "concept:observability-control" }, { "type": "usesConcept", "from": "blueprint:consequential-member-impact-agent", "to": "concept:evidence-engineering" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:GOV-001" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:GOV-002" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:GOV-003" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:DAT-002" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:VER-004" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:AUT-001" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:AUT-002" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:RUN-002" }, { "type": "requiresControl", "from": "blueprint:consequential-member-impact-agent", "to": "control:LIF-001" } ] }