[{"data":1,"prerenderedAt":2112},["ShallowReactive",2],{"cycle-doc-bob-wire-c16-analysis.md":3},{"cycle":4,"project":7,"path":10,"title":11,"toc":12,"ast":22},{"id":5,"title":6},"c16","Agent Control Plane",{"id":8,"label":9},"bob-wire","Bob-Wire","analysis.md","c16 — Phase 1 Analysis: Stakeholder & Persona Evaluation of the qcontrol Control Plane",[13,14,15,16,17,18,19,20,21],"1. Framing","2. Scoring rubric","3. Per-view evaluation","4. Score summary","5. Per-persona evaluation (the 5 seats carry over from c15)","6. Additional personas to consider","7. Net-new surfaces (the prompt's headline question)","8. Page-set recommendation for Phase 2","Appendix — cheap, honest wins already implied by the app",{"type":23,"children":24},"root",[25,78,82,88,114,134,142,184,223,226,231,271,364,367,372,379,609,615,883,889,1022,1028,1110,1113,1118,1183,1186,1191,1202,1294,1305,1383,1394,1456,1467,1542,1553,1610,1613,1618,1630,1790,1807,1810,1815,1827,1910,1918,1956,1959,1964,1983,1993,2008,2018,2021,2026],{"type":26,"tag":27,"props":28,"children":29},"element","p",{},[30,37,39,44,46,53,55,61,63,68,70,76],{"type":26,"tag":31,"props":32,"children":33},"strong",{},[34],{"type":35,"value":36},"text","Source under analysis:",{"type":35,"value":38}," the ",{"type":26,"tag":31,"props":40,"children":41},{},[42],{"type":35,"value":43},"qcontrol control plane",{"type":35,"value":45}," at ",{"type":26,"tag":47,"props":48,"children":50},"code",{"className":49},[],[51],{"type":35,"value":52},"http:\u002F\u002Flocalhost:7878\u002F",{"type":35,"value":54}," — a\nself-contained agent-native dashboard (the new ",{"type":26,"tag":47,"props":56,"children":58},{"className":57},[],[59],{"type":35,"value":60},"wf1",{"type":35,"value":62},"). Twelve views across four nav groups\n(Assurance \u002F Security \u002F Identity & Access \u002F Admin).\n",{"type":26,"tag":31,"props":64,"children":65},{},[66],{"type":35,"value":67},"Method:",{"type":35,"value":69}," read the full app source (HTML + JS + the ",{"type":26,"tag":47,"props":71,"children":73},{"className":72},[],[74],{"type":35,"value":75},"\u002Fapi\u002F*",{"type":35,"value":77}," JSON shapes). Scores below are\ngrounded in what each view actually renders, not its title.",{"type":26,"tag":79,"props":80,"children":81},"hr",{},[],{"type":26,"tag":83,"props":84,"children":86},"h2",{"id":85},"_1-framing",[87],{"type":35,"value":13},{"type":26,"tag":27,"props":89,"children":90},{},[91,93,98,100,105,107,112],{"type":35,"value":92},"c15 evaluated a ",{"type":26,"tag":31,"props":94,"children":95},{},[96],{"type":35,"value":97},"traffic-observability",{"type":35,"value":99}," product and its egress model leaked everywhere.\nqcontrol is the opposite starting point: it is ",{"type":26,"tag":31,"props":101,"children":102},{},[103],{"type":35,"value":104},"already agent-native",{"type":35,"value":106},". Its unit of analysis\nis the ",{"type":26,"tag":31,"props":108,"children":109},{},[110],{"type":35,"value":111},"agent as an autonomous actor",{"type":35,"value":113}," — what it is (identity, runtime, credential), what it\ncan do (tools, MCP), what it did (actions, data access), what it cost (tokens, spend), and how\nsafe it is (posture score, findings mapped to AI frameworks). So the question is no longer \"is\nthis an agent product\" (it is) but:",{"type":26,"tag":115,"props":116,"children":117},"blockquote",{},[118],{"type":26,"tag":27,"props":119,"children":120},{},[121],{"type":26,"tag":31,"props":122,"children":123},{},[124,126,132],{"type":35,"value":125},"How well does each view serve the three mandate-owners — Security, Finance, Executive — for\n",{"type":26,"tag":127,"props":128,"children":129},"em",{},[130],{"type":35,"value":131},"governing AI agents",{"type":35,"value":133},", and where are the gaps that justify net-new surfaces?",{"type":26,"tag":27,"props":135,"children":136},{},[137],{"type":26,"tag":31,"props":138,"children":139},{},[140],{"type":35,"value":141},"Three findings frame everything below:",{"type":26,"tag":143,"props":144,"children":145},"ol",{},[146,157,174],{"type":26,"tag":147,"props":148,"children":149},"li",{},[150,155],{"type":26,"tag":31,"props":151,"children":152},{},[153],{"type":35,"value":154},"Security is the center of gravity and well-served.",{"type":35,"value":156}," Findings, Posture, Identity, DLP, and\nthe Inventory profile form a complete CISO loop (inventory → posture → finding → remediate →\ncredential). The richest, most mature half of the app.",{"type":26,"tag":147,"props":158,"children":159},{},[160,165,167,172],{"type":26,"tag":31,"props":161,"children":162},{},[163],{"type":35,"value":164},"Finance is now served — a reversal from c15.",{"type":35,"value":166}," Cost Center (spend by model\u002Fagent\u002Fuser\u002F\nprovider, cache %, period, trend) plus Teams & Users (per-person showback) close the gap c15\ncalled the product's biggest. What's still missing is ",{"type":26,"tag":31,"props":168,"children":169},{},[170],{"type":35,"value":171},"forward-looking",{"type":35,"value":173}," FinOps: budgets,\nforecast, spend ceilings, and true chargeback (showback → P&L needs an IdP join).",{"type":26,"tag":147,"props":175,"children":176},{},[177,182],{"type":26,"tag":31,"props":178,"children":179},{},[180],{"type":35,"value":181},"Executive still has no home.",{"type":35,"value":183}," The board-relevant signals (governed-agent %, posture index,\n$ spend & $-at-risk, open high findings, coverage) exist but are scattered across operator\nviews; nothing is packaged for a board. This is the single clearest net-new opportunity — the\nsame conclusion c15 reached, now grounded on a cleaner app.",{"type":26,"tag":27,"props":185,"children":186},{},[187,192,194,199,201,206,208,213,215,221],{"type":26,"tag":31,"props":188,"children":189},{},[190],{"type":35,"value":191},"Residual egress to demote (decision: keep as a detail-level signal only).",{"type":35,"value":193}," qcontrol is\nmostly clean but still leans on egress in two spots: ",{"type":26,"tag":31,"props":195,"children":196},{},[197],{"type":35,"value":198},"(a)",{"type":35,"value":200}," 2 of 3 live Findings are\n\"Egress to non-allowlisted destination,\" and ",{"type":26,"tag":31,"props":202,"children":203},{},[204],{"type":35,"value":205},"(b)",{"type":35,"value":207}," Policy & Enforcement leads its dry-run with\negress allow-list block counts. In c16 these reframe to ",{"type":26,"tag":31,"props":209,"children":210},{},[211],{"type":35,"value":212},"behavior",{"type":35,"value":214}," — unauthorized actions,\nexcessive capability, credential risk, sensitive-data reads, unbounded consumption — with egress\ndemoted to the one ",{"type":26,"tag":47,"props":216,"children":218},{"className":217},[],[219],{"type":35,"value":220},"Network Egress",{"type":35,"value":222}," card on the agent profile.",{"type":26,"tag":79,"props":224,"children":225},{},[],{"type":26,"tag":83,"props":227,"children":229},{"id":228},"_2-scoring-rubric",[230],{"type":35,"value":14},{"type":26,"tag":27,"props":232,"children":233},{},[234,236,241,243,248,250,255,257,262,264,269],{"type":35,"value":235},"Per stakeholder, per view, 0–5. Primary columns ",{"type":26,"tag":31,"props":237,"children":238},{},[239],{"type":35,"value":240},"S",{"type":35,"value":242}," = Security, ",{"type":26,"tag":31,"props":244,"children":245},{},[246],{"type":35,"value":247},"F",{"type":35,"value":249}," = Finance, ",{"type":26,"tag":31,"props":251,"children":252},{},[253],{"type":35,"value":254},"E",{"type":35,"value":256}," =\nExecutive; secondary ",{"type":26,"tag":31,"props":258,"children":259},{},[260],{"type":35,"value":261},"Eng",{"type":35,"value":263}," = Engineering\u002FPlatform, ",{"type":26,"tag":31,"props":265,"children":266},{},[267],{"type":35,"value":268},"C",{"type":35,"value":270}," = Compliance\u002FPrivacy.",{"type":26,"tag":272,"props":273,"children":274},"table",{},[275,294],{"type":26,"tag":276,"props":277,"children":278},"thead",{},[279],{"type":26,"tag":280,"props":281,"children":282},"tr",{},[283,289],{"type":26,"tag":284,"props":285,"children":286},"th",{},[287],{"type":35,"value":288},"Score",{"type":26,"tag":284,"props":290,"children":291},{},[292],{"type":35,"value":293},"Meaning",{"type":26,"tag":295,"props":296,"children":297},"tbody",{},[298,312,325,338,351],{"type":26,"tag":280,"props":299,"children":300},{},[301,307],{"type":26,"tag":302,"props":303,"children":304},"td",{},[305],{"type":35,"value":306},"0",{"type":26,"tag":302,"props":308,"children":309},{},[310],{"type":35,"value":311},"No value to this stakeholder for agent governance",{"type":26,"tag":280,"props":313,"children":314},{},[315,320],{"type":26,"tag":302,"props":316,"children":317},{},[318],{"type":35,"value":319},"1–2",{"type":26,"tag":302,"props":321,"children":322},{},[323],{"type":35,"value":324},"Tangential \u002F enabling plumbing",{"type":26,"tag":280,"props":326,"children":327},{},[328,333],{"type":26,"tag":302,"props":329,"children":330},{},[331],{"type":35,"value":332},"3",{"type":26,"tag":302,"props":334,"children":335},{},[336],{"type":35,"value":337},"Useful, but needs reframing or packaging to land",{"type":26,"tag":280,"props":339,"children":340},{},[341,346],{"type":26,"tag":302,"props":342,"children":343},{},[344],{"type":35,"value":345},"4",{"type":26,"tag":302,"props":347,"children":348},{},[349],{"type":35,"value":350},"Strong fit",{"type":26,"tag":280,"props":352,"children":353},{},[354,359],{"type":26,"tag":302,"props":355,"children":356},{},[357],{"type":35,"value":358},"5",{"type":26,"tag":302,"props":360,"children":361},{},[362],{"type":35,"value":363},"Core daily value for governing agents",{"type":26,"tag":79,"props":365,"children":366},{},[],{"type":26,"tag":83,"props":368,"children":370},{"id":369},"_3-per-view-evaluation",[371],{"type":35,"value":15},{"type":26,"tag":373,"props":374,"children":376},"h3",{"id":375},"assurance",[377],{"type":35,"value":378},"Assurance",{"type":26,"tag":272,"props":380,"children":381},{},[382,418],{"type":26,"tag":276,"props":383,"children":384},{},[385],{"type":26,"tag":280,"props":386,"children":387},{},[388,393,397,401,405,409,413],{"type":26,"tag":284,"props":389,"children":390},{},[391],{"type":35,"value":392},"View",{"type":26,"tag":284,"props":394,"children":395},{},[396],{"type":35,"value":240},{"type":26,"tag":284,"props":398,"children":399},{},[400],{"type":35,"value":247},{"type":26,"tag":284,"props":402,"children":403},{},[404],{"type":35,"value":254},{"type":26,"tag":284,"props":406,"children":407},{},[408],{"type":35,"value":261},{"type":26,"tag":284,"props":410,"children":411},{},[412],{"type":35,"value":268},{"type":26,"tag":284,"props":414,"children":415},{},[416],{"type":35,"value":417},"Purpose & note",{"type":26,"tag":295,"props":419,"children":420},{},[421,465,517,559],{"type":26,"tag":280,"props":422,"children":423},{},[424,432,436,440,444,448,453],{"type":26,"tag":302,"props":425,"children":426},{},[427],{"type":26,"tag":31,"props":428,"children":429},{},[430],{"type":35,"value":431},"Fleet Overview",{"type":26,"tag":302,"props":433,"children":434},{},[435],{"type":35,"value":345},{"type":26,"tag":302,"props":437,"children":438},{},[439],{"type":35,"value":332},{"type":26,"tag":302,"props":441,"children":442},{},[443],{"type":35,"value":332},{"type":26,"tag":302,"props":445,"children":446},{},[447],{"type":35,"value":345},{"type":26,"tag":302,"props":449,"children":450},{},[451],{"type":35,"value":452},"2",{"type":26,"tag":302,"props":454,"children":455},{},[456,458,463],{"type":35,"value":457},"At-a-glance fleet health + triage. KPI cards, deep-linked attention strip, token\u002Fposture\u002Fbehavioral donuts, activity area, top-risks, fleet table. ",{"type":26,"tag":31,"props":459,"children":460},{},[461],{"type":35,"value":462},"Operator-framed, not board-packaged",{"type":35,"value":464}," → seeds the net-new exec board. Low-hanging: add MoM deltas to the KPI cards.",{"type":26,"tag":280,"props":466,"children":467},{},[468,478,482,486,490,494,498],{"type":26,"tag":302,"props":469,"children":470},{},[471,476],{"type":26,"tag":31,"props":472,"children":473},{},[474],{"type":35,"value":475},"Agent Inventory",{"type":35,"value":477}," (+ profile)",{"type":26,"tag":302,"props":479,"children":480},{},[481],{"type":35,"value":358},{"type":26,"tag":302,"props":483,"children":484},{},[485],{"type":35,"value":332},{"type":26,"tag":302,"props":487,"children":488},{},[489],{"type":35,"value":452},{"type":26,"tag":302,"props":491,"children":492},{},[493],{"type":35,"value":345},{"type":26,"tag":302,"props":495,"children":496},{},[497],{"type":35,"value":332},{"type":26,"tag":302,"props":499,"children":500},{},[501,503,508,510,515],{"type":35,"value":502},"The canonical ",{"type":26,"tag":31,"props":504,"children":505},{},[506],{"type":35,"value":507},"agent registry",{"type":35,"value":509}," + per-agent forensic ",{"type":26,"tag":31,"props":511,"children":512},{},[513],{"type":35,"value":514},"profile",{"type":35,"value":516}," (identity, runtime\u002Fprocess, data access, MCP, token\u002Fcost breakdown, posture + factors). The spine of the app. Opportunity: a governed\u002Fungoverned filter, an owner rollup, bulk policy actions.",{"type":26,"tag":280,"props":518,"children":519},{},[520,528,533,537,541,545,549],{"type":26,"tag":302,"props":521,"children":522},{},[523],{"type":26,"tag":31,"props":524,"children":525},{},[526],{"type":35,"value":527},"Cost Center",{"type":26,"tag":302,"props":529,"children":530},{},[531],{"type":35,"value":532},"1",{"type":26,"tag":302,"props":534,"children":535},{},[536],{"type":35,"value":358},{"type":26,"tag":302,"props":538,"children":539},{},[540],{"type":35,"value":345},{"type":26,"tag":302,"props":542,"children":543},{},[544],{"type":35,"value":452},{"type":26,"tag":302,"props":546,"children":547},{},[548],{"type":35,"value":532},{"type":26,"tag":302,"props":550,"children":551},{},[552,557],{"type":26,"tag":31,"props":553,"children":554},{},[555],{"type":35,"value":556},"The Finance surface.",{"type":35,"value":558}," Spend by model\u002Fagent\u002Fuser\u002Fprovider, cache %, period toggle, honest estimated-cost labeling, trend. Closes c15's biggest gap. High-hanging: budgets, forecast, per-agent spend ceilings, chargeback to P&L.",{"type":26,"tag":280,"props":560,"children":561},{},[562,570,574,578,582,586,590],{"type":26,"tag":302,"props":563,"children":564},{},[565],{"type":26,"tag":31,"props":566,"children":567},{},[568],{"type":35,"value":569},"Performance",{"type":26,"tag":302,"props":571,"children":572},{},[573],{"type":35,"value":532},{"type":26,"tag":302,"props":575,"children":576},{},[577],{"type":35,"value":452},{"type":26,"tag":302,"props":579,"children":580},{},[581],{"type":35,"value":532},{"type":26,"tag":302,"props":583,"children":584},{},[585],{"type":35,"value":358},{"type":26,"tag":302,"props":587,"children":588},{},[589],{"type":35,"value":306},{"type":26,"tag":302,"props":591,"children":592},{},[593,595,600,602,607],{"type":35,"value":594},"LLM latency ",{"type":26,"tag":31,"props":596,"children":597},{},[598],{"type":35,"value":599},"percentiles",{"type":35,"value":601}," (p50\u002Fp95\u002Fp99), slowest responses, out-tok\u002Fs. The builder's tuning surface. Gap: it measures ",{"type":26,"tag":31,"props":603,"children":604},{},[605],{"type":35,"value":606},"call latency, not task outcome",{"type":35,"value":608}," — agent reliability should also be success\u002Fquality (see §6).",{"type":26,"tag":373,"props":610,"children":612},{"id":611},"security",[613],{"type":35,"value":614},"Security",{"type":26,"tag":272,"props":616,"children":617},{},[618,652],{"type":26,"tag":276,"props":619,"children":620},{},[621],{"type":26,"tag":280,"props":622,"children":623},{},[624,628,632,636,640,644,648],{"type":26,"tag":284,"props":625,"children":626},{},[627],{"type":35,"value":392},{"type":26,"tag":284,"props":629,"children":630},{},[631],{"type":35,"value":240},{"type":26,"tag":284,"props":633,"children":634},{},[635],{"type":35,"value":247},{"type":26,"tag":284,"props":637,"children":638},{},[639],{"type":35,"value":254},{"type":26,"tag":284,"props":641,"children":642},{},[643],{"type":35,"value":261},{"type":26,"tag":284,"props":645,"children":646},{},[647],{"type":35,"value":268},{"type":26,"tag":284,"props":649,"children":650},{},[651],{"type":35,"value":417},{"type":26,"tag":295,"props":653,"children":654},{},[655,698,748,791,847],{"type":26,"tag":280,"props":656,"children":657},{},[658,666,670,674,678,682,686],{"type":26,"tag":302,"props":659,"children":660},{},[661],{"type":26,"tag":31,"props":662,"children":663},{},[664],{"type":35,"value":665},"Findings",{"type":26,"tag":302,"props":667,"children":668},{},[669],{"type":35,"value":358},{"type":26,"tag":302,"props":671,"children":672},{},[673],{"type":35,"value":532},{"type":26,"tag":302,"props":675,"children":676},{},[677],{"type":35,"value":332},{"type":26,"tag":302,"props":679,"children":680},{},[681],{"type":35,"value":332},{"type":26,"tag":302,"props":683,"children":684},{},[685],{"type":35,"value":345},{"type":26,"tag":302,"props":687,"children":688},{},[689,691,696],{"type":35,"value":690},"CISO worklist; findings auto-mapped to OWASP LLM Top 10 \u002F MITRE ATLAS \u002F NIST AI RMF; severity + framework filters; click → agent. Core daily value. ",{"type":26,"tag":31,"props":692,"children":693},{},[694],{"type":35,"value":695},"Reframe:",{"type":35,"value":697}," the live list still leans on egress-destination findings → recast to behavioral findings (excessive agency, root, credential, sensitive-read, unbounded consumption).",{"type":26,"tag":280,"props":699,"children":700},{},[701,709,713,717,721,725,729],{"type":26,"tag":302,"props":702,"children":703},{},[704],{"type":26,"tag":31,"props":705,"children":706},{},[707],{"type":35,"value":708},"Security Posture",{"type":26,"tag":302,"props":710,"children":711},{},[712],{"type":35,"value":358},{"type":26,"tag":302,"props":714,"children":715},{},[716],{"type":35,"value":532},{"type":26,"tag":302,"props":718,"children":719},{},[720],{"type":35,"value":345},{"type":26,"tag":302,"props":722,"children":723},{},[724],{"type":35,"value":345},{"type":26,"tag":302,"props":726,"children":727},{},[728],{"type":35,"value":332},{"type":26,"tag":302,"props":730,"children":731},{},[732,734,739,741,746],{"type":35,"value":733},"Fleet score gauge (100 − risk-factor deductions), factor breakdown, current-vs-worst regression, ",{"type":26,"tag":31,"props":735,"children":736},{},[737],{"type":35,"value":738},"shadow-AI",{"type":35,"value":740}," at-rest installs (instrumented vs unmonitored). Board-legible. High-hanging: posture ",{"type":26,"tag":31,"props":742,"children":743},{},[744],{"type":35,"value":745},"trend over time",{"type":35,"value":747},", per-team posture.",{"type":26,"tag":280,"props":749,"children":750},{},[751,759,763,767,771,775,779],{"type":26,"tag":302,"props":752,"children":753},{},[754],{"type":26,"tag":31,"props":755,"children":756},{},[757],{"type":35,"value":758},"Data Protection (DLP)",{"type":26,"tag":302,"props":760,"children":761},{},[762],{"type":35,"value":345},{"type":26,"tag":302,"props":764,"children":765},{},[766],{"type":35,"value":532},{"type":26,"tag":302,"props":768,"children":769},{},[770],{"type":35,"value":452},{"type":26,"tag":302,"props":772,"children":773},{},[774],{"type":35,"value":452},{"type":26,"tag":302,"props":776,"children":777},{},[778],{"type":35,"value":358},{"type":26,"tag":302,"props":780,"children":781},{},[782,784,789],{"type":35,"value":783},"Sensitive paths touched by category\u002Fuser, byte volume; prompt\u002Fresponse content inspection is an honest ",{"type":26,"tag":31,"props":785,"children":786},{},[787],{"type":35,"value":788},"preview",{"type":35,"value":790},". Compliance-core. Opportunity: content scanning (secrets\u002FPII\u002Fsource) with graduated enforcement.",{"type":26,"tag":280,"props":792,"children":793},{},[794,802,806,810,814,818,822],{"type":26,"tag":302,"props":795,"children":796},{},[797],{"type":26,"tag":31,"props":798,"children":799},{},[800],{"type":35,"value":801},"Policy & Enforcement",{"type":26,"tag":302,"props":803,"children":804},{},[805],{"type":35,"value":345},{"type":26,"tag":302,"props":807,"children":808},{},[809],{"type":35,"value":452},{"type":26,"tag":302,"props":811,"children":812},{},[813],{"type":35,"value":332},{"type":26,"tag":302,"props":815,"children":816},{},[817],{"type":35,"value":358},{"type":26,"tag":302,"props":819,"children":820},{},[821],{"type":35,"value":332},{"type":26,"tag":302,"props":823,"children":824},{},[825,827,832,834,839,841,845],{"type":35,"value":826},"The control plane: ",{"type":26,"tag":31,"props":828,"children":829},{},[830],{"type":35,"value":831},"Audit → Assist → Enforce",{"type":35,"value":833},", plus a \"what an enforcing policy ",{"type":26,"tag":127,"props":835,"children":836},{},[837],{"type":35,"value":838},"would",{"type":35,"value":840}," have blocked\" dry-run computed from audit data — a strong value demo. ",{"type":26,"tag":31,"props":842,"children":843},{},[844],{"type":35,"value":695},{"type":35,"value":846}," lead with tool\u002FMCP\u002Faction + spend-ceiling + HITL gates; demote the egress allow-list to one card.",{"type":26,"tag":280,"props":848,"children":849},{},[850,858,862,866,870,874,878],{"type":26,"tag":302,"props":851,"children":852},{},[853],{"type":26,"tag":31,"props":854,"children":855},{},[856],{"type":35,"value":857},"Compliance",{"type":26,"tag":302,"props":859,"children":860},{},[861],{"type":35,"value":332},{"type":26,"tag":302,"props":863,"children":864},{},[865],{"type":35,"value":532},{"type":26,"tag":302,"props":867,"children":868},{},[869],{"type":35,"value":332},{"type":26,"tag":302,"props":871,"children":872},{},[873],{"type":35,"value":532},{"type":26,"tag":302,"props":875,"children":876},{},[877],{"type":35,"value":358},{"type":26,"tag":302,"props":879,"children":880},{},[881],{"type":35,"value":882},"Runtime findings auto-tagged to control frameworks (incl. OWASP Agentic), evidence export (JSON\u002FCSV), projected ISO 42001 \u002F EU AI Act \u002F SOC 2, forensic why-trail. Auditor-core, honest about projected-vs-live. Opportunity: server-side evidence pack, scheduled reports.",{"type":26,"tag":373,"props":884,"children":886},{"id":885},"identity-access",[887],{"type":35,"value":888},"Identity & Access",{"type":26,"tag":272,"props":890,"children":891},{},[892,926],{"type":26,"tag":276,"props":893,"children":894},{},[895],{"type":26,"tag":280,"props":896,"children":897},{},[898,902,906,910,914,918,922],{"type":26,"tag":284,"props":899,"children":900},{},[901],{"type":35,"value":392},{"type":26,"tag":284,"props":903,"children":904},{},[905],{"type":35,"value":240},{"type":26,"tag":284,"props":907,"children":908},{},[909],{"type":35,"value":247},{"type":26,"tag":284,"props":911,"children":912},{},[913],{"type":35,"value":254},{"type":26,"tag":284,"props":915,"children":916},{},[917],{"type":35,"value":261},{"type":26,"tag":284,"props":919,"children":920},{},[921],{"type":35,"value":268},{"type":26,"tag":284,"props":923,"children":924},{},[925],{"type":35,"value":417},{"type":26,"tag":295,"props":927,"children":928},{},[929,979],{"type":26,"tag":280,"props":930,"children":931},{},[932,940,944,948,952,956,960],{"type":26,"tag":302,"props":933,"children":934},{},[935],{"type":26,"tag":31,"props":936,"children":937},{},[938],{"type":35,"value":939},"Teams & Users",{"type":26,"tag":302,"props":941,"children":942},{},[943],{"type":35,"value":345},{"type":26,"tag":302,"props":945,"children":946},{},[947],{"type":35,"value":345},{"type":26,"tag":302,"props":949,"children":950},{},[951],{"type":35,"value":332},{"type":26,"tag":302,"props":953,"children":954},{},[955],{"type":35,"value":452},{"type":26,"tag":302,"props":957,"children":958},{},[959],{"type":35,"value":332},{"type":26,"tag":302,"props":961,"children":962},{},[963,965,970,972,977],{"type":35,"value":964},"The ",{"type":26,"tag":31,"props":966,"children":967},{},[968],{"type":35,"value":969},"\"who\"",{"type":35,"value":971}," — per-person showback + sensitive-data access + risk, ranked by risk; honest ",{"type":26,"tag":127,"props":973,"children":974},{},[975],{"type":35,"value":976},"observed-not-verified",{"type":35,"value":978}," identity, OS-user join. Bridges Finance ↔ Security. High-hanging: chargeback to P&L + Team\u002FDept rollups (need IdP\u002FSCIM — projected).",{"type":26,"tag":280,"props":980,"children":981},{},[982,990,994,998,1002,1006,1010],{"type":26,"tag":302,"props":983,"children":984},{},[985],{"type":26,"tag":31,"props":986,"children":987},{},[988],{"type":35,"value":989},"Agent Identity",{"type":26,"tag":302,"props":991,"children":992},{},[993],{"type":35,"value":358},{"type":26,"tag":302,"props":995,"children":996},{},[997],{"type":35,"value":532},{"type":26,"tag":302,"props":999,"children":1000},{},[1001],{"type":35,"value":452},{"type":26,"tag":302,"props":1003,"children":1004},{},[1005],{"type":35,"value":332},{"type":26,"tag":302,"props":1007,"children":1008},{},[1009],{"type":35,"value":332},{"type":26,"tag":302,"props":1011,"children":1012},{},[1013,1015,1020],{"type":35,"value":1014},"Machine-credential governance (NHI): credential class + risk (static key vs revocable OAuth, consumer vs org-backed), bound org\u002Faccount. Honest ",{"type":26,"tag":127,"props":1016,"children":1017},{},[1018],{"type":35,"value":1019},"observed, not issued\u002Fverified",{"type":35,"value":1021},". Opportunity: IdP join, JIT credentials, rotation (all projected).",{"type":26,"tag":373,"props":1023,"children":1025},{"id":1024},"admin",[1026],{"type":35,"value":1027},"Admin",{"type":26,"tag":272,"props":1029,"children":1030},{},[1031,1065],{"type":26,"tag":276,"props":1032,"children":1033},{},[1034],{"type":26,"tag":280,"props":1035,"children":1036},{},[1037,1041,1045,1049,1053,1057,1061],{"type":26,"tag":284,"props":1038,"children":1039},{},[1040],{"type":35,"value":392},{"type":26,"tag":284,"props":1042,"children":1043},{},[1044],{"type":35,"value":240},{"type":26,"tag":284,"props":1046,"children":1047},{},[1048],{"type":35,"value":247},{"type":26,"tag":284,"props":1050,"children":1051},{},[1052],{"type":35,"value":254},{"type":26,"tag":284,"props":1054,"children":1055},{},[1056],{"type":35,"value":261},{"type":26,"tag":284,"props":1058,"children":1059},{},[1060],{"type":35,"value":268},{"type":26,"tag":284,"props":1062,"children":1063},{},[1064],{"type":35,"value":417},{"type":26,"tag":295,"props":1066,"children":1067},{},[1068],{"type":26,"tag":280,"props":1069,"children":1070},{},[1071,1079,1083,1087,1091,1095,1099],{"type":26,"tag":302,"props":1072,"children":1073},{},[1074],{"type":26,"tag":31,"props":1075,"children":1076},{},[1077],{"type":35,"value":1078},"Integrations",{"type":26,"tag":302,"props":1080,"children":1081},{},[1082],{"type":35,"value":332},{"type":26,"tag":302,"props":1084,"children":1085},{},[1086],{"type":35,"value":532},{"type":26,"tag":302,"props":1088,"children":1089},{},[1090],{"type":35,"value":452},{"type":26,"tag":302,"props":1092,"children":1093},{},[1094],{"type":35,"value":345},{"type":26,"tag":302,"props":1096,"children":1097},{},[1098],{"type":35,"value":332},{"type":26,"tag":302,"props":1100,"children":1101},{},[1102,1104,1108],{"type":35,"value":1103},"Live qcontrol event stream + findings export (work today); projected SIEM \u002F GRC \u002F identity \u002F alerting connectors, each grounded in the real local volume it ",{"type":26,"tag":127,"props":1105,"children":1106},{},[1107],{"type":35,"value":838},{"type":35,"value":1109}," carry. Honest \"local-only\" posture. Opportunity: wire the connectors; scheduled SIEM\u002FGRC push.",{"type":26,"tag":79,"props":1111,"children":1112},{},[],{"type":26,"tag":83,"props":1114,"children":1116},{"id":1115},"_4-score-summary",[1117],{"type":35,"value":16},{"type":26,"tag":1119,"props":1120,"children":1121},"ul",{},[1122,1132,1148,1163,1173],{"type":26,"tag":147,"props":1123,"children":1124},{},[1125,1130],{"type":26,"tag":31,"props":1126,"children":1127},{},[1128],{"type":35,"value":1129},"Top Security surfaces (the CISO loop):",{"type":35,"value":1131}," Agent Inventory\u002Fprofile (5), Findings (5), Security\nPosture (5), Agent Identity (5), then DLP \u002F Policy \u002F Teams \u002F Fleet Overview (4).",{"type":26,"tag":147,"props":1133,"children":1134},{},[1135,1140,1142,1146],{"type":26,"tag":31,"props":1136,"children":1137},{},[1138],{"type":35,"value":1139},"Finance — now served, but reactive:",{"type":35,"value":1141}," Cost Center (5) and Teams & Users (4) anchor it; Fleet\nOverview (3) for top-line. The remaining gap is ",{"type":26,"tag":31,"props":1143,"children":1144},{},[1145],{"type":35,"value":171},{"type":35,"value":1147}," (budgets\u002Fforecast\u002Fceilings\u002F\nchargeback), not visibility.",{"type":26,"tag":147,"props":1149,"children":1150},{},[1151,1156,1158],{"type":26,"tag":31,"props":1152,"children":1153},{},[1154],{"type":35,"value":1155},"Executive — partially served, no home:",{"type":35,"value":1157}," strongest borrowed signals are Cost Center (4) and\nSecurity Posture (4); everything else is 2–3 and operator-shaped. ",{"type":26,"tag":31,"props":1159,"children":1160},{},[1161],{"type":35,"value":1162},"No board-packaged surface.",{"type":26,"tag":147,"props":1164,"children":1165},{},[1166,1171],{"type":26,"tag":31,"props":1167,"children":1168},{},[1169],{"type":35,"value":1170},"Engineering\u002FPlatform — well served:",{"type":35,"value":1172}," Performance (5), Policy & Enforcement (5), Integrations\n(4), Agent Inventory runtime detail (4), Posture factors (4). The build\u002Foperate persona.",{"type":26,"tag":147,"props":1174,"children":1175},{},[1176,1181],{"type":26,"tag":31,"props":1177,"children":1178},{},[1179],{"type":35,"value":1180},"Compliance\u002FPrivacy — well served:",{"type":35,"value":1182}," Compliance (5), DLP (5), Findings→frameworks (4).",{"type":26,"tag":79,"props":1184,"children":1185},{},[],{"type":26,"tag":83,"props":1187,"children":1189},{"id":1188},"_5-per-persona-evaluation-the-5-seats-carry-over-from-c15",[1190],{"type":35,"value":17},{"type":26,"tag":373,"props":1192,"children":1194},{"id":1193},"security-ciso-core-audience-well-served",[1195,1197],{"type":35,"value":1196},"Security \u002F CISO — ",{"type":26,"tag":127,"props":1198,"children":1199},{},[1200],{"type":35,"value":1201},"core audience, well served",{"type":26,"tag":1119,"props":1203,"children":1204},{},[1205,1215,1225,1256],{"type":26,"tag":147,"props":1206,"children":1207},{},[1208,1213],{"type":26,"tag":31,"props":1209,"children":1210},{},[1211],{"type":35,"value":1212},"Views:",{"type":35,"value":1214}," Findings, Security Posture, Agent Identity, Data Protection, Policy & Enforcement,\nAgent Inventory (+profile), Teams (risk).",{"type":26,"tag":147,"props":1216,"children":1217},{},[1218,1223],{"type":26,"tag":31,"props":1219,"children":1220},{},[1221],{"type":35,"value":1222},"Served:",{"type":35,"value":1224}," Strongly. A complete loop: inventory → posture → finding → remediate → credential.",{"type":26,"tag":147,"props":1226,"children":1227},{},[1228,1233,1235,1240,1242,1247,1249,1254],{"type":26,"tag":31,"props":1229,"children":1230},{},[1231],{"type":35,"value":1232},"Gaps:",{"type":35,"value":1234}," Findings still partly egress-shaped; no ",{"type":26,"tag":31,"props":1236,"children":1237},{},[1238],{"type":35,"value":1239},"capability\u002Faction authorization matrix",{"type":35,"value":1241},"\n(\"what each agent ",{"type":26,"tag":127,"props":1243,"children":1244},{},[1245],{"type":35,"value":1246},"may",{"type":35,"value":1248}," do\"); no ",{"type":26,"tag":31,"props":1250,"children":1251},{},[1252],{"type":35,"value":1253},"instruction\u002Fprompt-change governance",{"type":35,"value":1255},"; posture has no trend.",{"type":26,"tag":147,"props":1257,"children":1258},{},[1259,1264,1266,1271,1273,1278,1280,1285,1287,1292],{"type":26,"tag":31,"props":1260,"children":1261},{},[1262],{"type":35,"value":1263},"Opportunities:",{"type":35,"value":1265}," ",{"type":26,"tag":127,"props":1267,"children":1268},{},[1269],{"type":35,"value":1270},"Low",{"type":35,"value":1272}," — reframe egress findings to behavioral; add a posture trend line.\n",{"type":26,"tag":127,"props":1274,"children":1275},{},[1276],{"type":35,"value":1277},"High",{"type":35,"value":1279}," — a ",{"type":26,"tag":31,"props":1281,"children":1282},{},[1283],{"type":35,"value":1284},"Capability & Action Authorization",{"type":35,"value":1286}," surface; ",{"type":26,"tag":31,"props":1288,"children":1289},{},[1290],{"type":35,"value":1291},"Instruction\u002FPrompt governance",{"type":35,"value":1293},".",{"type":26,"tag":373,"props":1295,"children":1297},{"id":1296},"finance-finops-now-served-reversal-from-c15-but-reactive",[1298,1300],{"type":35,"value":1299},"Finance \u002F FinOps — ",{"type":26,"tag":127,"props":1301,"children":1302},{},[1303],{"type":35,"value":1304},"now served (reversal from c15), but reactive",{"type":26,"tag":1119,"props":1306,"children":1307},{},[1308,1317,1333,1356],{"type":26,"tag":147,"props":1309,"children":1310},{},[1311,1315],{"type":26,"tag":31,"props":1312,"children":1313},{},[1314],{"type":35,"value":1212},{"type":35,"value":1316}," Cost Center, Teams & Users (showback); Fleet Overview spend cards.",{"type":26,"tag":147,"props":1318,"children":1319},{},[1320,1324,1326,1331],{"type":26,"tag":31,"props":1321,"children":1322},{},[1323],{"type":35,"value":1222},{"type":35,"value":1325}," Well, for ",{"type":26,"tag":127,"props":1327,"children":1328},{},[1329],{"type":35,"value":1330},"visibility",{"type":35,"value":1332},". Spend by model\u002Fagent\u002Fuser\u002Fprovider with honest estimated-cost\nlabeling is exactly the missing c15 dimension, delivered.",{"type":26,"tag":147,"props":1334,"children":1335},{},[1336,1340,1342,1347,1349,1354],{"type":26,"tag":31,"props":1337,"children":1338},{},[1339],{"type":35,"value":1232},{"type":35,"value":1341}," No ",{"type":26,"tag":31,"props":1343,"children":1344},{},[1345],{"type":35,"value":1346},"budget\u002Fforecast\u002Fspend-ceiling",{"type":35,"value":1348},"; ",{"type":26,"tag":31,"props":1350,"children":1351},{},[1352],{"type":35,"value":1353},"showback ≠ chargeback",{"type":35,"value":1355}," (no P&L\u002FTeam rollup\nwithout an IdP join); no per-agent cost-efficiency ($\u002Fsuccessful-task).",{"type":26,"tag":147,"props":1357,"children":1358},{},[1359,1363,1364,1368,1370,1374,1376,1381],{"type":26,"tag":31,"props":1360,"children":1361},{},[1362],{"type":35,"value":1263},{"type":35,"value":1265},{"type":26,"tag":127,"props":1365,"children":1366},{},[1367],{"type":35,"value":1270},{"type":35,"value":1369}," — Team\u002FDept tag dimension on Cost Center. ",{"type":26,"tag":127,"props":1371,"children":1372},{},[1373],{"type":35,"value":1277},{"type":35,"value":1375}," — ",{"type":26,"tag":31,"props":1377,"children":1378},{},[1379],{"type":35,"value":1380},"Budget, Forecast &\nSpend Ceilings",{"type":35,"value":1382}," surface + ceiling-alert policy; chargeback rollups post-IdP.",{"type":26,"tag":373,"props":1384,"children":1386},{"id":1385},"executive-signals-exist-no-board-home",[1387,1389],{"type":35,"value":1388},"Executive — ",{"type":26,"tag":127,"props":1390,"children":1391},{},[1392],{"type":35,"value":1393},"signals exist, no board home",{"type":26,"tag":1119,"props":1395,"children":1396},{},[1397,1406,1415,1424],{"type":26,"tag":147,"props":1398,"children":1399},{},[1400,1404],{"type":26,"tag":31,"props":1401,"children":1402},{},[1403],{"type":35,"value":1212},{"type":35,"value":1405}," borrows Fleet Overview, Posture score, Findings high-count, Cost trend.",{"type":26,"tag":147,"props":1407,"children":1408},{},[1409,1413],{"type":26,"tag":31,"props":1410,"children":1411},{},[1412],{"type":35,"value":1222},{"type":35,"value":1414}," Partially. The ingredients are present but scattered across operator views; nothing\nis packaged, trended, or exportable for a board.",{"type":26,"tag":147,"props":1416,"children":1417},{},[1418,1422],{"type":26,"tag":31,"props":1419,"children":1420},{},[1421],{"type":35,"value":1232},{"type":35,"value":1423}," No single posture\u002FROI surface; no governance-index trend; no \"$ at risk\"; no export.",{"type":26,"tag":147,"props":1425,"children":1426},{},[1427,1431,1432,1436,1438,1442,1444,1449,1451],{"type":26,"tag":31,"props":1428,"children":1429},{},[1430],{"type":35,"value":1263},{"type":35,"value":1265},{"type":26,"tag":127,"props":1433,"children":1434},{},[1435],{"type":35,"value":1270},{"type":35,"value":1437}," — a posture scorecard tile on Fleet Overview. ",{"type":26,"tag":127,"props":1439,"children":1440},{},[1441],{"type":35,"value":1277},{"type":35,"value":1443}," — a net-new\n",{"type":26,"tag":31,"props":1445,"children":1446},{},[1447],{"type":35,"value":1448},"Executive Governance & ROI Board",{"type":35,"value":1450}," + board-ready export. ",{"type":26,"tag":31,"props":1452,"children":1453},{},[1454],{"type":35,"value":1455},"The clearest net-new in the app.",{"type":26,"tag":373,"props":1457,"children":1459},{"id":1458},"engineering-platform-well-served-build-operate",[1460,1462],{"type":35,"value":1461},"Engineering \u002F Platform — ",{"type":26,"tag":127,"props":1463,"children":1464},{},[1465],{"type":35,"value":1466},"well served (build & operate)",{"type":26,"tag":1119,"props":1468,"children":1469},{},[1470,1479,1488,1511],{"type":26,"tag":147,"props":1471,"children":1472},{},[1473,1477],{"type":26,"tag":31,"props":1474,"children":1475},{},[1476],{"type":35,"value":1212},{"type":35,"value":1478}," Performance, Policy & Enforcement, Integrations, Agent Inventory (runtime), Posture\nfactors, Installations (shadow-AI).",{"type":26,"tag":147,"props":1480,"children":1481},{},[1482,1486],{"type":26,"tag":31,"props":1483,"children":1484},{},[1485],{"type":35,"value":1222},{"type":35,"value":1487}," Strongly. They own the enforcement config, the latency tuning, and the connectors.",{"type":26,"tag":147,"props":1489,"children":1490},{},[1491,1495,1497,1502,1504,1509],{"type":26,"tag":31,"props":1492,"children":1493},{},[1494],{"type":35,"value":1232},{"type":35,"value":1496}," Reliability is ",{"type":26,"tag":31,"props":1498,"children":1499},{},[1500],{"type":35,"value":1501},"latency-only",{"type":35,"value":1503}," — no task-success\u002Fquality signal; no agent ",{"type":26,"tag":31,"props":1505,"children":1506},{},[1507],{"type":35,"value":1508},"topology\u002F\ndelegation",{"type":35,"value":1510}," view for multi-agent systems.",{"type":26,"tag":147,"props":1512,"children":1513},{},[1514,1518,1519,1523,1525,1529,1530,1535,1536,1541],{"type":26,"tag":31,"props":1515,"children":1516},{},[1517],{"type":35,"value":1263},{"type":35,"value":1265},{"type":26,"tag":127,"props":1520,"children":1521},{},[1522],{"type":35,"value":1270},{"type":35,"value":1524}," — correlate latency × cost on Performance. ",{"type":26,"tag":127,"props":1526,"children":1527},{},[1528],{"type":35,"value":1277},{"type":35,"value":1375},{"type":26,"tag":31,"props":1531,"children":1532},{},[1533],{"type":35,"value":1534},"Task Outcomes &\nQuality",{"type":35,"value":1348},{"type":26,"tag":31,"props":1537,"children":1538},{},[1539],{"type":35,"value":1540},"Agent Topology \u002F Delegation",{"type":35,"value":1293},{"type":26,"tag":373,"props":1543,"children":1545},{"id":1544},"compliance-privacy-well-served",[1546,1548],{"type":35,"value":1547},"Compliance \u002F Privacy — ",{"type":26,"tag":127,"props":1549,"children":1550},{},[1551],{"type":35,"value":1552},"well served",{"type":26,"tag":1119,"props":1554,"children":1555},{},[1556,1565,1574,1583],{"type":26,"tag":147,"props":1557,"children":1558},{},[1559,1563],{"type":26,"tag":31,"props":1560,"children":1561},{},[1562],{"type":35,"value":1212},{"type":35,"value":1564}," Compliance, Data Protection, Findings→frameworks, Teams (attribution), evidence export.",{"type":26,"tag":147,"props":1566,"children":1567},{},[1568,1572],{"type":26,"tag":31,"props":1569,"children":1570},{},[1571],{"type":35,"value":1222},{"type":35,"value":1573}," Strongly, and honestly (projected vs. live is labeled).",{"type":26,"tag":147,"props":1575,"children":1576},{},[1577,1581],{"type":26,"tag":31,"props":1578,"children":1579},{},[1580],{"type":35,"value":1232},{"type":35,"value":1582}," Content inspection still preview; no scheduled evidence pack; no retention\u002Fresidency view\nfor agent memory & records.",{"type":26,"tag":147,"props":1584,"children":1585},{},[1586,1590,1591,1595,1597,1601,1603,1608],{"type":26,"tag":31,"props":1587,"children":1588},{},[1589],{"type":35,"value":1263},{"type":35,"value":1265},{"type":26,"tag":127,"props":1592,"children":1593},{},[1594],{"type":35,"value":1270},{"type":35,"value":1596}," — schedule the findings export. ",{"type":26,"tag":127,"props":1598,"children":1599},{},[1600],{"type":35,"value":1277},{"type":35,"value":1602}," — content DLP; an ",{"type":26,"tag":31,"props":1604,"children":1605},{},[1606],{"type":35,"value":1607},"Agent Memory\n& Record retention",{"type":35,"value":1609}," surface.",{"type":26,"tag":79,"props":1611,"children":1612},{},[],{"type":26,"tag":83,"props":1614,"children":1616},{"id":1615},"_6-additional-personas-to-consider",[1617],{"type":35,"value":18},{"type":26,"tag":27,"props":1619,"children":1620},{},[1621,1623,1628],{"type":35,"value":1622},"The prompt names Security \u002F Finance \u002F Executive and asks \"others?\". The 5-seat model from c15\n",{"type":26,"tag":31,"props":1624,"children":1625},{},[1626],{"type":35,"value":1627},"holds",{"type":35,"value":1629}," against qcontrol's surfaces. Reflections:",{"type":26,"tag":272,"props":1631,"children":1632},{},[1633,1654],{"type":26,"tag":276,"props":1634,"children":1635},{},[1636],{"type":26,"tag":280,"props":1637,"children":1638},{},[1639,1644,1649],{"type":26,"tag":284,"props":1640,"children":1641},{},[1642],{"type":35,"value":1643},"Persona",{"type":26,"tag":284,"props":1645,"children":1646},{},[1647],{"type":35,"value":1648},"Served by",{"type":26,"tag":284,"props":1650,"children":1651},{},[1652],{"type":35,"value":1653},"Verdict",{"type":26,"tag":295,"props":1655,"children":1656},{},[1657,1683,1708,1736,1762],{"type":26,"tag":280,"props":1658,"children":1659},{},[1660,1668,1673],{"type":26,"tag":302,"props":1661,"children":1662},{},[1663],{"type":26,"tag":31,"props":1664,"children":1665},{},[1666],{"type":35,"value":1667},"Engineering \u002F Platform",{"type":26,"tag":302,"props":1669,"children":1670},{},[1671],{"type":35,"value":1672},"Performance, Policy, Integrations, Inventory runtime",{"type":26,"tag":302,"props":1674,"children":1675},{},[1676,1681],{"type":26,"tag":31,"props":1677,"children":1678},{},[1679],{"type":35,"value":1680},"Keep as a seat",{"type":35,"value":1682}," — primary builder\u002Foperator.",{"type":26,"tag":280,"props":1684,"children":1685},{},[1686,1694,1699],{"type":26,"tag":302,"props":1687,"children":1688},{},[1689],{"type":26,"tag":31,"props":1690,"children":1691},{},[1692],{"type":35,"value":1693},"Compliance \u002F Privacy",{"type":26,"tag":302,"props":1695,"children":1696},{},[1697],{"type":35,"value":1698},"Compliance, DLP, Findings→frameworks",{"type":26,"tag":302,"props":1700,"children":1701},{},[1702,1706],{"type":26,"tag":31,"props":1703,"children":1704},{},[1705],{"type":35,"value":1680},{"type":35,"value":1707}," — distinct mandate, increasingly central to AI governance.",{"type":26,"tag":280,"props":1709,"children":1710},{},[1711,1719,1724],{"type":26,"tag":302,"props":1712,"children":1713},{},[1714],{"type":26,"tag":31,"props":1715,"children":1716},{},[1717],{"type":35,"value":1718},"Procurement \u002F AI-vendor mgmt",{"type":26,"tag":302,"props":1720,"children":1721},{},[1722],{"type":35,"value":1723},"Cost Center by_provider",{"type":26,"tag":302,"props":1725,"children":1726},{},[1727,1729,1734],{"type":35,"value":1728},"Fold under ",{"type":26,"tag":31,"props":1730,"children":1731},{},[1732],{"type":35,"value":1733},"Finance",{"type":35,"value":1735}," (DPA\u002Fsanctioned-vendor is a finance sub-mandate).",{"type":26,"tag":280,"props":1737,"children":1738},{},[1739,1747,1752],{"type":26,"tag":302,"props":1740,"children":1741},{},[1742],{"type":26,"tag":31,"props":1743,"children":1744},{},[1745],{"type":35,"value":1746},"Incident responder \u002F SecOps on-call",{"type":26,"tag":302,"props":1748,"children":1749},{},[1750],{"type":35,"value":1751},"Findings, Policy kill-switch",{"type":26,"tag":302,"props":1753,"children":1754},{},[1755,1756,1760],{"type":35,"value":1728},{"type":26,"tag":31,"props":1757,"children":1758},{},[1759],{"type":35,"value":614},{"type":35,"value":1761}," unless an on-call function is distinct.",{"type":26,"tag":280,"props":1763,"children":1764},{},[1765,1773,1778],{"type":26,"tag":302,"props":1766,"children":1767},{},[1768],{"type":26,"tag":31,"props":1769,"children":1770},{},[1771],{"type":35,"value":1772},"Agent owner \u002F developer (the human behind an agent)",{"type":26,"tag":302,"props":1774,"children":1775},{},[1776],{"type":35,"value":1777},"Teams & Users, agent profile",{"type":26,"tag":302,"props":1779,"children":1780},{},[1781,1783,1788],{"type":35,"value":1782},"Worth noting — qcontrol foregrounds ",{"type":26,"tag":127,"props":1784,"children":1785},{},[1786],{"type":35,"value":1787},"attribution to a human",{"type":35,"value":1789},"; an \"agent owner self-service\" view is a possible future seat, not needed now.",{"type":26,"tag":27,"props":1791,"children":1792},{},[1793,1798,1800,1805],{"type":26,"tag":31,"props":1794,"children":1795},{},[1796],{"type":35,"value":1797},"Recommendation:",{"type":35,"value":1799}," keep the ",{"type":26,"tag":31,"props":1801,"children":1802},{},[1803],{"type":35,"value":1804},"five seats",{"type":35,"value":1806}," (Security \u002F Finance \u002F Executive \u002F Engineering \u002F\nCompliance) as the persona partition for Phase 2.",{"type":26,"tag":79,"props":1808,"children":1809},{},[],{"type":26,"tag":83,"props":1811,"children":1813},{"id":1812},"_7-net-new-surfaces-the-prompts-headline-question",[1814],{"type":35,"value":19},{"type":26,"tag":27,"props":1816,"children":1817},{},[1818,1820,1825],{"type":35,"value":1819},"qcontrol answers ",{"type":26,"tag":127,"props":1821,"children":1822},{},[1823],{"type":35,"value":1824},"\"yes — there are exec\u002Ffinance surfaces that don't exist.\"",{"type":35,"value":1826}," Synthesizing §3–§5,\nthe missing surfaces, in priority order:",{"type":26,"tag":143,"props":1828,"children":1829},{},[1830,1864,1880],{"type":26,"tag":147,"props":1831,"children":1832},{},[1833,1837,1838,1843,1845,1850,1852,1857,1859],{"type":26,"tag":31,"props":1834,"children":1835},{},[1836],{"type":35,"value":1448},{"type":35,"value":1265},{"type":26,"tag":127,"props":1839,"children":1840},{},[1841],{"type":35,"value":1842},"(Executive, Security)",{"type":35,"value":1844}," — one board view: governed-agent\ncount & %, fleet posture index ",{"type":26,"tag":31,"props":1846,"children":1847},{},[1848],{"type":35,"value":1849},"trended over time",{"type":35,"value":1851},", total $ spend & ",{"type":26,"tag":31,"props":1853,"children":1854},{},[1855],{"type":35,"value":1856},"$-at-risk",{"type":35,"value":1858},", open\nhigh-severity findings, instrumentation coverage %, shadow-AI count — exportable. Packages the\nscattered operator signals for a board. ",{"type":26,"tag":31,"props":1860,"children":1861},{},[1862],{"type":35,"value":1863},"The lead net-new page.",{"type":26,"tag":147,"props":1865,"children":1866},{},[1867,1872,1873,1878],{"type":26,"tag":31,"props":1868,"children":1869},{},[1870],{"type":35,"value":1871},"Budget, Forecast & Spend Ceilings",{"type":35,"value":1265},{"type":26,"tag":127,"props":1874,"children":1875},{},[1876],{"type":35,"value":1877},"(Finance, Executive)",{"type":35,"value":1879}," — per-agent\u002Fper-team budgets,\nburn-down, forecast, ceiling-breach alerts, chargeback rollup. Turns Cost Center from reactive\nvisibility into forward-looking FinOps.",{"type":26,"tag":147,"props":1881,"children":1882},{},[1883,1888,1889,1894,1896,1901,1903,1908],{"type":26,"tag":31,"props":1884,"children":1885},{},[1886],{"type":35,"value":1887},"Task Outcomes & Quality",{"type":35,"value":1265},{"type":26,"tag":127,"props":1890,"children":1891},{},[1892],{"type":35,"value":1893},"(Engineering, Executive, Security)",{"type":35,"value":1895}," — qcontrol measures latency +\ntokens + posture but ",{"type":26,"tag":31,"props":1897,"children":1898},{},[1899],{"type":35,"value":1900},"never whether the agent's task succeeded.",{"type":35,"value":1902}," Success rate, goal\ncompletion, output quality, and human-intervention rate are first-class agent-governance\nsignals that no view covers. The biggest ",{"type":26,"tag":127,"props":1904,"children":1905},{},[1906],{"type":35,"value":1907},"conceptual",{"type":35,"value":1909}," gap.",{"type":26,"tag":27,"props":1911,"children":1912},{},[1913],{"type":26,"tag":31,"props":1914,"children":1915},{},[1916],{"type":35,"value":1917},"Agent-native gaps worth noting (Phase 2 may fold into existing pages rather than new ones):",{"type":26,"tag":1119,"props":1919,"children":1920},{},[1921,1937,1947],{"type":26,"tag":147,"props":1922,"children":1923},{},[1924,1929,1931,1935],{"type":26,"tag":31,"props":1925,"children":1926},{},[1927],{"type":35,"value":1928},"Capability & Action Authorization matrix",{"type":35,"value":1930}," — \"what each agent ",{"type":26,"tag":127,"props":1932,"children":1933},{},[1934],{"type":35,"value":1246},{"type":35,"value":1936}," do\" (use tool X, write\nprod DB, call sub-agents). Policy & Enforcement hints at it (tool\u002FMCP allow-list, projected);\npromote it to a first-class authorization surface.",{"type":26,"tag":147,"props":1938,"children":1939},{},[1940,1945],{"type":26,"tag":31,"props":1941,"children":1942},{},[1943],{"type":35,"value":1944},"Instruction \u002F Prompt governance",{"type":35,"value":1946}," — system-prompt inventory + change control. Absent.",{"type":26,"tag":147,"props":1948,"children":1949},{},[1950,1954],{"type":26,"tag":31,"props":1951,"children":1952},{},[1953],{"type":35,"value":1540},{"type":35,"value":1955}," — who delegates to whom in multi-agent systems. Absent.",{"type":26,"tag":79,"props":1957,"children":1958},{},[],{"type":26,"tag":83,"props":1960,"children":1962},{"id":1961},"_8-page-set-recommendation-for-phase-2",[1963],{"type":35,"value":20},{"type":26,"tag":27,"props":1965,"children":1966},{},[1967,1969,1974,1976,1981],{"type":35,"value":1968},"A ",{"type":26,"tag":31,"props":1970,"children":1971},{},[1972],{"type":35,"value":1973},"persona-partitioned",{"type":35,"value":1975}," lo-fi app (the approach the requester likes), with deep pages that are\nagent-native reframes of qcontrol's 12 views ",{"type":26,"tag":31,"props":1977,"children":1978},{},[1979],{"type":35,"value":1980},"plus the net-new surfaces above",{"type":35,"value":1982},":",{"type":26,"tag":27,"props":1984,"children":1985},{},[1986,1991],{"type":26,"tag":31,"props":1987,"children":1988},{},[1989],{"type":35,"value":1990},"Reframes of qcontrol views:",{"type":35,"value":1992}," Fleet Overview, Agent Inventory (+ profile), Cost Center,\nShowback (Teams & Users), Performance, Findings, Security Posture, Data Protection,\nPolicy & Enforcement, Compliance, Agent Identity, Integrations.",{"type":26,"tag":27,"props":1994,"children":1995},{},[1996,2001,2002,2006],{"type":26,"tag":31,"props":1997,"children":1998},{},[1999],{"type":35,"value":2000},"Net-new:",{"type":35,"value":1265},{"type":26,"tag":31,"props":2003,"children":2004},{},[2005],{"type":35,"value":1448},{"type":35,"value":2007}," (lead), and — scope permitting — Budget &\nSpend Ceilings and Task Outcomes & Quality.",{"type":26,"tag":27,"props":2009,"children":2010},{},[2011,2016],{"type":26,"tag":31,"props":2012,"children":2013},{},[2014],{"type":35,"value":2015},"Phase 3 mockup lead set:",{"type":35,"value":2017}," Executive Board, Cost Center, Agent Inventory (+profile) — covers all\nthree primary stakeholders and tells the clearest story; Findings & Security Posture as follow-ons.",{"type":26,"tag":79,"props":2019,"children":2020},{},[],{"type":26,"tag":83,"props":2022,"children":2024},{"id":2023},"appendix-cheap-honest-wins-already-implied-by-the-app",[2025],{"type":35,"value":21},{"type":26,"tag":1119,"props":2027,"children":2028},{},[2029,2056,2068,2088,2100],{"type":26,"tag":147,"props":2030,"children":2031},{},[2032,2034,2039,2041,2047,2048,2054],{"type":35,"value":2033},"Reframe the 2 egress-destination Findings to ",{"type":26,"tag":31,"props":2035,"children":2036},{},[2037],{"type":35,"value":2038},"behavioral",{"type":35,"value":2040}," findings (the c16 data model already\ndoes this — see ",{"type":26,"tag":47,"props":2042,"children":2044},{"className":2043},[],[2045],{"type":35,"value":2046},"app\u002Fdata\u002Fc16-fleet.ts",{"type":35,"value":1265},{"type":26,"tag":47,"props":2049,"children":2051},{"className":2050},[],[2052],{"type":35,"value":2053},"findings",{"type":35,"value":2055},").",{"type":26,"tag":147,"props":2057,"children":2058},{},[2059,2061,2066],{"type":35,"value":2060},"Add ",{"type":26,"tag":31,"props":2062,"children":2063},{},[2064],{"type":35,"value":2065},"MoM deltas",{"type":35,"value":2067}," to Fleet Overview KPI cards (data is present in the cost series).",{"type":26,"tag":147,"props":2069,"children":2070},{},[2071,2073,2078,2080,2086],{"type":35,"value":2072},"Add a ",{"type":26,"tag":31,"props":2074,"children":2075},{},[2076],{"type":35,"value":2077},"governed\u002Fungoverned",{"type":35,"value":2079}," filter to Agent Inventory (the ",{"type":26,"tag":47,"props":2081,"children":2083},{"className":2082},[],[2084],{"type":35,"value":2085},"governed",{"type":35,"value":2087}," flag exists in the model).",{"type":26,"tag":147,"props":2089,"children":2090},{},[2091,2093,2098],{"type":35,"value":2092},"Surface a ",{"type":26,"tag":31,"props":2094,"children":2095},{},[2096],{"type":35,"value":2097},"posture-trend",{"type":35,"value":2099}," sparkline on Security Posture (history is \"projected\" today).",{"type":26,"tag":147,"props":2101,"children":2102},{},[2103,2105,2110],{"type":35,"value":2104},"Promote the ",{"type":26,"tag":31,"props":2106,"children":2107},{},[2108],{"type":35,"value":2109},"shadow-AI count",{"type":35,"value":2111}," (installed-but-unmonitored) to a headline coverage KPI.",1794599425554]