Structural requirements for governed agentic systems, grounded in specification theory, proof theory, and source-reliability epistemology.
v1.2 · 18 May 2026The system must operate toward an explicitly stated purpose. The purpose statement must define the output space and specify either a success predicate (for goal-directed systems) or an explicit exploration charter with defined domain, constraints, value signals, and stopping or redirect conditions (for exploratory systems). Systems that transition between modes must specify the transition criteria.
System performance must be evaluated against explicit criteria known to the agent. The criteria need not be public or universal. They may be subjective or as simple as the satisfaction of a named person or role. What matters is that the agent has a mechanism to know whether the evaluation condition has been met. Invisible criteria cannot be satisfied reliably.
The system must only act within its defined scope of authority: what it is permitted to do, the source of that authority (which may be role- or policy-based), and the predefined conditions under which that authority can be expanded, restricted, or revoked.
Information must be handled according to defined trust and sensitivity constraints.
Outputs must satisfy explicitly defined acceptance criteria that are demonstrably mapped to the reasonable expectations of identified stakeholders and any applicable obligations, before being released or acted upon. Acceptance criteria that are not so mapped produce a false sense of security: a technically true proposition about a poor output is not quality control.
The governing specification must not contain unresolved contradictions. Three failure modes are identified: explicit contradiction, where two instructions cannot both be followed; implicit ambiguity, where an instruction admits multiple valid readings with different execution outcomes; and mechanism-obligation mismatch, where the document certifies a capability its specified mechanism cannot deliver.
The governing document must declare when its content becomes stale and specify the conditions that require re-evaluation. A document that makes no staleness declaration will silently assert authority over a system it may no longer correctly describe.