Cross-paper finding · 5 source reviews
Governance becomes consequential when rules can alter execution
Principles, taxonomies and assurance evidence do not themselves govern a system; governance becomes operational when evidence is connected to decision authority, intervention, enforcement and residual-risk ownership.
Reviews across AI risk tooling, agent governance and platform access repeatedly separate descriptive or evaluative capability from the institutional machinery that can permit, constrain, stop, adjudicate or remedy action.
AuthorityAccountabilityEnforcementInstitutional Capacity
Evidence base
- Taxonomy-Driven Analysis of Open-Source AI Risk Mitigation Tools
A taxonomy-to-tool map can expose where engineering controls exist, but it does not make governance executable unless detection is connected to authority, decision rights, enforcement, remediation and accountable acceptance of residual risk.
- Designing Loyalty: AI Agents and Conflicts of Interest
A duty of loyalty becomes governable only when delegated authority, conflicts of interest, execution boundaries, revocation, and evidence of action can be made observable and enforceable at the point an agent acts.
- Who Owns AI When It Breaks? The Convergence of AI Governance and Cybersecurity Accountability
The Decision Authority Charter is a credible route from accountability language to executable control, but its real governance test is whether named owners and preauthorized intervention still work when business, security, legal, and operational authorities genuinely conflict.
- When AI Begins to Build AI
The paper is strong on making control executable, but incomplete as governance: moving authority out of the agent does not solve the problem unless the control plane's own power to define, enforce, revoke, and contest policy is legitimate and constrained.
- The Agentic Web Requires New Normative Infrastructure
The paper successfully makes platform control over agent access a governance object, but its delegation-transparency-proportionality triad remains normative infrastructure in design form until access disputes have shared evidence, revocation, adjudication, and remedy.
Cross-paper finding · 4 source reviews
Identity and provenance do not establish authority
Knowing who or what acted, or proving the causal origin of an action, does not establish that the actor was entitled to exercise the authority required for that action.
Reviews of agent IDs, provenance-bounded execution, credential verification and national trust infrastructure converge on a recurring category boundary between attribution and legitimate mandate.
AuthorityLegitimacyProvenanceDelegation
Evidence base
- Designing Agent IDs
An agent ID can make identity, provenance, and permission legible to a service, but it becomes governance infrastructure only when the authority behind those claims can be scoped, refreshed, revoked, contested, and independently trusted.
- Authority Propagation Models: PoP vs PoC and the Confused Deputy Problem
Provenance-bounded execution can prevent downstream privilege expansion, but continuity of authority does not establish the legitimacy of the authority at the origin.
- A Verifier-Centric Conceptual Model for Digital Credential Ecosystems
Credential interoperability is not a property of shared formats alone: it exists only when verifiers can obtain the constitutional and logistical materials needed to decide what to trust, while retaining responsibility for the assumptions that make acceptance legitimate.
- Building a National Digital Trust Architecture for India: From Digital Identity and Data Exchange to Federated Institutional Trust
This is a strong trust-architecture proposal because it refuses to collapse verification into reliance, but it remains a governance blueprint rather than deployable national infrastructure until legal authority, registry operation, liability, and cross-sector redress are resolved.
Cross-paper finding · 3 source reviews
Delegated authority is a lifecycle, not a grant event
A governed delegation must remain bounded, current, observable and revocable throughout execution rather than being treated as valid merely because an initial credential, token or policy grant existed.
The archive repeatedly finds that delegation proposals are more complete at issuance than at expiry, suspension, revocation, restoration, dispute and evidence preservation.
AuthorityDelegationRevocationRedress
Evidence base
- Designing Agent IDs
An agent ID can make identity, provenance, and permission legible to a service, but it becomes governance infrastructure only when the authority behind those claims can be scoped, refreshed, revoked, contested, and independently trusted.
- Authority is a Continuous System
A continuity model can prevent downstream authority manufacture, but a governable system still needs explicit rules for how legitimate authority is created, revoked, disputed, and restarted.
- Designing Loyalty: AI Agents and Conflicts of Interest
A duty of loyalty becomes governable only when delegated authority, conflicts of interest, execution boundaries, revocation, and evidence of action can be made observable and enforceable at the point an agent acts.
Cross-paper finding · 3 source reviews
Responsibility follows the topology of knowledge and control
In agentic systems, accountability cannot be assigned reliably from formal role labels or the presence of a human approver; it depends on who had relevant knowledge, intervention power and decision authority at the points where consequential pathways were created.
Recent reviews independently move accountability away from nominal human presence and toward the actual distribution of decision rights, oversight capacity and stop-work authority.
AccountabilityAuthorityInstitutional CapacityDelegation
Evidence base
- AI Agents Push Humans Out of the Loop
Human oversight is not a governance control merely because a person remains in the loop; it is effective only while the system preserves the attention, expertise, independence, and decision capacity required to exercise authority over it.
- Who Owns AI When It Breaks? The Convergence of AI Governance and Cybersecurity Accountability
The Decision Authority Charter is a credible route from accountability language to executable control, but its real governance test is whether named owners and preauthorized intervention still work when business, security, legal, and operational authorities genuinely conflict.
- The Responsibility Cascade: Moral Attribution and Governance Challenges in Agentic AI Systems
SRAF is a strong diagnostic model for where responsibility migrates in agentic workflows, but it is not yet an operational allocation method because knowledge, control, adjudication, and remedy remain difficult to measure and enforce.
Cross-paper finding · 2 source reviews
Institutional reliance is a governance decision, not a verification result
Cryptographic validity, issuer identity and provenance can support a relying institution's decision, but they do not determine whether reliance is authorised, appropriate for the purpose or legitimate.
Credential and trust-infrastructure reviews converge on the need to make verifier or relying-party policy explicit, including issuer authority, purpose, current status and responsibility for acceptance.
AuthorityLegitimacyProvenanceAccountability
Evidence base
Cross-paper finding · 3 source reviews
Rights and duties must survive delegation across agent ecosystems
Normative duties become operational only when they remain attached to delegated action across developers, deployers, platforms and agents through constraints, evidence, intervention rights and remedy.
Fiduciary, human-rights and responsibility analyses reach a shared institutional problem. Distributed technical execution can diffuse responsibility unless duties are made traceable and enforceable across organizational boundaries.
AccountabilityDelegationEnforcementRedress
Evidence base
- Designing Loyalty: AI Agents and Conflicts of Interest
A duty of loyalty becomes governable only when delegated authority, conflicts of interest, execution boundaries, revocation, and evidence of action can be made observable and enforceable at the point an agent acts.
- Leveraging Human Rights Frameworks for Agentic AI Governance
The UNGP translation is institutionally useful, but shared responsibility remains aspirational until rights-relevant duties survive delegation as enforceable constraints with named intervention authority, adjudication, and remedy across organizational boundaries.
- The Responsibility Cascade: Moral Attribution and Governance Challenges in Agentic AI Systems
SRAF is a strong diagnostic model for where responsibility migrates in agentic workflows, but it is not yet an operational allocation method because knowledge, control, adjudication, and remedy remain difficult to measure and enforce.
Cross-paper finding · 2 source reviews
Composition can be part of the governed object
Assurance of components in isolation is incomplete when interaction topology, message ordering, retained context or delegated relationships can change system behaviour.
The archive contains both experimental evidence that interaction changes observed behaviour and governance analysis showing that delegated agents exercise authority through relationships rather than as isolated models.
AccountabilityDependency
Evidence base
Cross-paper finding · 3 source reviews
Moving control does not remove the governance problem
External policy engines, registries, platform access controls and other control-plane mechanisms can make governance more executable while simultaneously concentrating authority in the institutions that operate those mechanisms.
Recent reviews repeatedly show that moving constraints outside an agent or application improves enforceability but does not establish the legitimacy, accountability or contestability of the new decision point.
AuthorityLegitimacyEnforcementGatekeepingContestability
Evidence base
- When AI Begins to Build AI
The paper is strong on making control executable, but incomplete as governance: moving authority out of the agent does not solve the problem unless the control plane's own power to define, enforce, revoke, and contest policy is legitimate and constrained.
- Building a National Digital Trust Architecture for India: From Digital Identity and Data Exchange to Federated Institutional Trust
This is a strong trust-architecture proposal because it refuses to collapse verification into reliance, but it remains a governance blueprint rather than deployable national infrastructure until legal authority, registry operation, liability, and cross-sector redress are resolved.
- The Agentic Web Requires New Normative Infrastructure
The paper successfully makes platform control over agent access a governance object, but its delegation-transparency-proportionality triad remains normative infrastructure in design form until access disputes have shared evidence, revocation, adjudication, and remedy.
Cross-paper finding · 4 source reviews
Measurement does not confer legitimacy
Provenance, representational similarity, perceived acceptance, administrative coherence and other measurable properties can establish facts about a system without establishing who is entitled to decide, whose values should prevail or whether an action is legitimate.
Reviews now reach the same boundary from measurement, public-administration and state-capacity work: evidence about acceptance, coherence or representation can support analysis without supplying justified authority, contestability or institutional constraint.
LegitimacyProvenanceContestability
Evidence base
- People Are Not Just Their Countries. Disentangling Social Determinants of LLM Value Alignment Across Europe
Measuring which populations an LLM resembles is evidence about representational distribution, not a mandate for whose values the system should implement; moving from country averages to demographic granularity makes the legitimacy of the alignment target more, not less, important.
- Credential Disclosure in (EU) Digital Identity Wallets: Privacy Risks and Practical Mitigations
Selective disclosure does not produce privacy by itself when the verifier can request excessive evidence and the holder must repeatedly judge whether disclosure is legitimate.
- Procedural fairness, accountability, and legitimacy in the AI-enabled state: evidence from China
The study is persuasive evidence about how perceived legitimacy forms around AI-enabled state action, but it cannot establish legitimate authority because acceptance, fairness perception, and accountability perception are not substitutes for contestable institutional responsibility.
- Structural Preconditions of Algorithmic Sovereignty: Informational Fragility and the Institutional Architecture of AI Governance
GPAS measures the administrative preconditions for algorithmic sovereignty more convincingly than it measures legitimate sovereignty itself, because informational coherence and state capacity do not establish contestability, institutional independence, or justified public authority.