Reviews that test whether governance claims are operational: whether authority, evidence, enforcement, revocation, accountability and remedy are actually implemented.
Membership is generated from controlled domain and topic rules, so future reviews appear automatically when their metadata matches this collection.
Traceability can preserve evidence about an AI-assisted sentencing decision, but accountability exists only when institutions attach that evidence to authority, contestation, remedy, and enforceable consequence.
Once a matching system permits bounded priority violations for efficiency, the threshold becomes an executable governance rule that determines whose institutional claim may be displaced and therefore requires legitimate authority, transparency and contestability.
An assistant can turn a user's subjective account into an apparently independent judgment without acquiring independent evidence, making epistemic separation a governance requirement rather than merely an accuracy objective.
A taxonomy-to-tool map can expose where engineering controls exist, but it does not make governance executable unless detection is connected to authority, decision rights, enforcement, remediation and accountable acceptance of residual risk.
When an evaluator can reward visible reasoning independently of verified task completion, the evaluation system becomes part of the behavior being optimized and cannot serve as neutral assurance evidence.
When an agent learns what to remember from later conversational rewards, memory becomes a policy over the user's future context and therefore requires governable rights to inspect, correct, delete and constrain that policy.
If interaction topology and message history can create behavior absent in isolated agents, assurance cannot stop at the model boundary: the relationship, protocol and composition become part of the governed system.
A duty of loyalty becomes governable only when delegated authority, conflicts of interest, execution boundaries, revocation, and evidence of action can be made observable and enforceable at the point an agent acts.
Selective disclosure does not produce privacy by itself when the verifier can request excessive evidence and the holder must repeatedly judge whether disclosure is legitimate.
Human oversight is not a governance control merely because a person remains in the loop; it is effective only while the system preserves the attention, expertise, independence, and decision capacity required to exercise authority over it.
Provenance-bounded execution can prevent downstream privilege expansion, but continuity of authority does not establish the legitimacy of the authority at the origin.
A continuity model can prevent downstream authority manufacture, but a governable system still needs explicit rules for how legitimate authority is created, revoked, disputed, and restarted.
A public trust mark is recognition infrastructure whose legitimacy depends on the independence, revocability, and contestability of the accreditation and certification chain behind it.
An agent ID can make identity, provenance, and permission legible to a service, but it becomes governance infrastructure only when the authority behind those claims can be scoped, refreshed, revoked, contested, and independently trusted.
Intermediate-token visibility is not assurance: when traces are not causally tied to outcomes, governance must attach trust to verifiable decisions and external commitments rather than plausible-looking model monologues.