# Observability & control

The combined telemetry and enforcement architecture for tracing agent behavior, evaluating policy, obtaining approval, constraining action, revoking authority, quarantining execution, and stopping systems.

core-concept · Security & governance · emerging · Reviewed 2026-08-09

## Definition

The combined telemetry and enforcement architecture for tracing agent behavior, evaluating policy, obtaining approval, constraining action, revoking authority, quarantining execution, and stopping systems. Observability explains what happened. A control plane determines what is allowed to happen next.

Telemetry conventions are maturing; a unified agent control plane is not yet one settled standard.

## Why it matters

Observability explains what happened. A control plane determines what is allowed to happen next.

The operating shift is from “Logs after execution” to “Evidence-aware intervention during execution.”

## System anatomy

- **Practice 1:** Trace model, tool, policy, approval, and outcome events
- **Practice 2:** Keep deny, hold, revoke, and stop paths operational
- **Practice 3:** Connect anomalies to accountable response



## Important distinctions

- **Logs after execution:** This concept moves the engineering system toward evidence-aware intervention during execution.



## Implementation signals

- Trace model, tool, policy, approval, and outcome events
- Keep deny, hold, revoke, and stop paths operational
- Connect anomalies to accountable response

## Failure modes

- Rich traces with no intervention authority
- A kill switch that is not continuously tested



## Related knowledge

- [Agent identity & delegated authority](https://aisdlc.ai/agentic-engineering/agent-identity) — The identity and authorization discipline that treats an enterprise agent as a non-human principal with attributable, purpose-bound, time-bound permissions.
- [Agent execution substrate](https://aisdlc.ai/agentic-engineering/execution-substrate) — The isolated, stateful environment in which agents observe and act, including compute, filesystem, browser, network, credentials, resource limits, and session lifecycle.
- [Evidence engineering](https://aisdlc.ai/agentic-engineering/evidence-engineering) — The design of versioned, queryable evidence linking requirements, decisions, implementations, tests, evaluations, approvals, deployments, runtime signals, and lifecycle actions.

## Sources and further study

- [NIST CAISI — Challenges in monitoring deployed AI systems](https://www.nist.gov/publications/challenges-monitoring-deployed-ai-systems-center-ai-standards-and-innovation) — A current view of monitoring needs and limitations for deployed AI systems. **Use:** Official guidance. **Limitation:** Guidance describes recommended practice; citation does not prove that a control is implemented or effective in a particular environment.
- [OpenTelemetry — GenAI observability](https://opentelemetry.io/blog/2026/genai-observability/) — Developing semantic conventions for model and agent telemetry across traces, metrics, and events. **Use:** Standard or protocol. **Limitation:** A specification defines an interface or control pattern; conformance alone does not establish authorization, security, or fitness for a use case.
- [OpenAI — How we monitor internal coding agents for misalignment](https://openai.com/index/how-we-monitor-internal-coding-agents-misalignment/) — A current account of monitoring powerful coding agents that can act inside consequential development environments. **Use:** First-party case study. **Limitation:** This first-party account documents one organization, product, or implementation context and should not be generalized without local evidence.

---

This library synthesizes cited research, standards, official documentation, and clearly attributed practitioner perspectives. Maturity describes the state of a concept—not vendor endorsement, production readiness, or permission to deploy. Benchmarks and demonstrations do not replace use-case evaluation, governed controls, independent verification, or named human release authority.