The paper holds no living breath, the code commits without a sound. When all the proxies walk away, who answers when the wheels touch ground?
When an autonomous system commits an irreversible act, accountability cannot be constructed retroactively from logs.
The debate over agentic autonomy tends to collapse into two equally unworkable positions. The prohibition reading demands an immediate halt to delegated authority until perfect accountability models are developed. This stance ignores economic reality: autonomous execution is already embedded in payments rails and security monitoring. Prohibiting delegation does not extinguish it; it merely pushes execution into informal, ungoverned shadow channels.
The ratification reading treats agent autonomy as self-evident progress and dismisses accountability controls as legacy friction. This posture mistakes velocity for competence. When an unmonitored delegation chain triggers a catastrophic financial loss or unlawful community exclusion, the rhetoric of technological inevitability evaporates, leaving organizations scrambling to find an entity that can legally settle the claim.
The instant of commitment
The governance unit that matters is the instant an action commits.
In Someone Had to Sign, the historical signature was defined by presence: a physical individual stood in the room, held the pen, and owned the consequences before the ink touched paper. Modern software architectures distribute that moment across model weights and API tokens.
To restore attribution to autonomous systems, three operational properties must be present at the exact moment of execution:
- A designated answerable principal: before an agent executes a transaction, a named human being must be registered as its institutional sponsor, carrying legal and financial accountability for errors.
- Engineered reversibility: actions that alter financial state or legal standing must incorporate designed cooling periods and rollback capabilities, rather than relying on post-hoc litigation.
- Independent evidence custody: runtime telemetry and context traces must be preserved by an external monitor rather than the system executing the task.
In Who Raises Whom, guardianship decayed when the system began training its own successors. In delegated authorization, governance decays when the actor becomes the sole author of its own authorization record.
From documents to deeds
The Corrupted Archive closed with two tests for records: whether they were preserved deliberately, and whether an identifiable filer stood behind the claim.
The arrival of agentic execution extends that test from documents to deeds. It is no longer sufficient to ask whether an administrative record holds up under hostile review. The sharper question is whether a specific human carried the commitment into the room while stopping remained possible.
As automated pipelines generate dispatches and legal determinations without human review, the gap between execution and accountability widens. When an action executes in absentia, true governance consists in ensuring that someone remains legally present when the consequences arrive.
Companions
- The opening premise of the signature: Someone Had to Sign.
- The lineage of automated guardianship: Who Raises Whom.
- The institutional persistence of administrative records: What the Descendant Inherits.
- The prior arc on evidentiary integrity: The Corrupted Archive.
- The operational standard: the Interim Protocol, four rules written for deliverables, and the nearest thing available to a moment-of-action test until something with a mandate writes one.
These notes come out of Sociable Systems, a practice that reads AI-shaped documents the way a hostile reviewer will, before a lender or a court finds the gap. The argument has an operational form: the Interim Protocol sets out four rules for AI use in environmental and social deliverables, covering disclosure at touch-point grain, evidence custody, the phrases no automated screening may settle, and a hostile read before anything ships. Free, and written to be cited or retired once institutional guidance arrives.