Audit and attribution
Every action traceable to an agent and to whoever answers for it.
capabilityEmerging Open on the map →
Facts
- Lane
- Trust and governance
- Wave
- 8 of 12 (build order, not a date)
- Needs
- 16 boxes all the way back through hard links
- Unlocks
- 18 boxes downstream through hard links
- Leverage
- 0.7 points · stands in the way of 7 of 53 stages · rank 14 of 57
- Cluster
- Trust plumbing and the agent economy
Evidence as of October 2026
Attribution and incident reporting are two of the three functions Chan et al. say agent infrastructure must provide.
Detail boxes 1
Secret-loyalty and backdoor audits
Checking models for hidden loyalties or triggers planted in training.
Forethought calls for audits for secret loyalties, with access to weights, data and code, plus weight fingerprinting.
Around it
Unlocks · 13
- Agent-native organisations
- Divergent-copy reconciliation
- Civilisation-scale knowledge
- Rollback
- Reputation and credentials
- Output verification at scale
- Scalable oversight
- Liability and insurance
- Legitimate governance
- Internal deployment oversight
- Institutions for agent societies
- Model weight security
- Verification of AI agreements
Loops and off-ramps
Openings researchers' judgement, October 2026 scouting
Startup room 69/100 · rank 7 of 124 Research room 64/100 · rank 19 of 124
- Depth
- deep
- Players
- Microsoft Agent 365/Purview; OpenAI+Promptfoo; Zenity ($125m C); Geordie ($30m); Datadog via OTel GenAI; Keycard
- Wedge
- Cross-organisation, tamper-evident signed action receipts bound to a delegation chain, emitted as OTel GenAI traces and packaged as EU AI Act or ISO 42001 evidence. startup