[{"data":1,"prerenderedAt":1503},["ShallowReactive",2],{"cycle-doc-bob-wire-c16-wf5-report.md":3},{"cycle":4,"project":7,"path":10,"title":11,"toc":12,"ast":18},{"id":5,"title":6},"c16","Agent Control Plane",{"id":8,"label":9},"bob-wire","Bob-Wire","wf5-report.md","c16 · wf5 — Report & Seat-Needs Analysis",[13,14,15,16,17],"Part 1 — Structure & Strategy","Part 2 — How well does wf5 serve each seat?","Part 3 — Cross-cutting strengths","Part 4 — Areas to improve (prioritized)","Part 5 — Seat scorecard",{"type":19,"children":20},"root",[21,37,84,88,94,101,135,159,165,190,229,253,299,305,358,364,376,499,510,516,566,569,574,586,592,634,682,695,748,802,808,846,897,903,977,1016,1022,1067,1090,1093,1098,1148,1151,1156,1174,1180,1219,1225,1248,1254,1287,1293,1313,1316,1321,1473],{"type":22,"tag":23,"props":24,"children":25},"element","p",{},[26,29,35],{"type":27,"value":28},"text","A standalone report on the ",{"type":22,"tag":30,"props":31,"children":32},"strong",{},[33],{"type":27,"value":34},"wf5 \"persona-first synthesis\"",{"type":27,"value":36}," control plane: how it's structured,\nthe strategy behind that structure, and an honest assessment of how well it serves each core seat —\nwith prioritized areas to improve.",{"type":22,"tag":23,"props":38,"children":39},{},[40,42,49,51,58,60,66,68,74,76,82],{"type":27,"value":41},"Route: ",{"type":22,"tag":43,"props":44,"children":46},"code",{"className":45},[],[47],{"type":27,"value":48},"\u002Fc16\u002Fwireframes\u002Fwf5\u002Fcontrol-plane-v1\u002Fsecurity-home",{"type":27,"value":50},"\nCompanion docs: ",{"type":22,"tag":52,"props":53,"children":55},"a",{"href":54},"\u002Fcycles\u002Fbob-wire\u002Fc16\u002Fdoc\u002Fwf5-analysis",[56],{"type":27,"value":57},"wf5-analysis.md",{"type":27,"value":59}," (the build rationale), ",{"type":22,"tag":52,"props":61,"children":63},{"href":62},"\u002Fcycles\u002Fbob-wire\u002Fc16\u002Fdoc\u002Fanalysis",[64],{"type":27,"value":65},"analysis.md",{"type":27,"value":67},"\n(Phase-1 scoring), ",{"type":22,"tag":52,"props":69,"children":71},{"href":70},"\u002Fcycles\u002Fbob-wire\u002Fc16\u002Fdoc\u002Fseat-composition-review",[72],{"type":27,"value":73},"seat-composition-review.md",{"type":27,"value":75}," (the gap backlog),\n",{"type":22,"tag":52,"props":77,"children":79},{"href":78},"\u002Fcycles\u002Fbob-wire\u002Fc16\u002Fdoc\u002Fcycle-history",[80],{"type":27,"value":81},"cycle-history.md",{"type":27,"value":83}," (the question model).",{"type":22,"tag":85,"props":86,"children":87},"hr",{},[],{"type":22,"tag":89,"props":90,"children":92},"h2",{"id":91},"part-1-structure-strategy",[93],{"type":27,"value":13},{"type":22,"tag":95,"props":96,"children":98},"h3",{"id":97},"_11-the-core-bet",[99],{"type":27,"value":100},"1.1 The core bet",{"type":22,"tag":23,"props":102,"children":103},{},[104,106,111,113,118,120,126,128,133],{"type":27,"value":105},"wf5 is built on one decision: ",{"type":22,"tag":30,"props":107,"children":108},{},[109],{"type":27,"value":110},"the user's role is the primary axis of the app, not the feature.",{"type":27,"value":112},"\nThe app is partitioned into ",{"type":22,"tag":30,"props":114,"children":115},{},[116],{"type":27,"value":117},"five persona seats",{"type":27,"value":119}," — Security · CISO, Finance · FinOps, Executive,\nEngineering · Platform, Compliance · Privacy. You enter as a ",{"type":22,"tag":121,"props":122,"children":123},"em",{},[124],{"type":27,"value":125},"who",{"type":27,"value":127},", and everything you see is\nalready framed for that who. The unit of analysis underneath is the ",{"type":22,"tag":30,"props":129,"children":130},{},[131],{"type":27,"value":132},"agent as an actor",{"type":27,"value":134}," (what it\nis, does, costs, who owns it, how safe it is) — never network egress, which is demoted to a single\ndetail card on the agent profile.",{"type":22,"tag":23,"props":136,"children":137},{},[138,140,145,147,152,154],{"type":27,"value":139},"wf5 is the ",{"type":22,"tag":30,"props":141,"children":142},{},[143],{"type":27,"value":144},"synthesis of two prior passes",{"type":27,"value":146},": it keeps wf3's clean persona structure and per-seat\nlensing, carries wf4's richer surfaces (Effectiveness, Usage Limits, Teams & Users, wall mode,\nlifecycle states, evidence pack), and ",{"type":22,"tag":30,"props":148,"children":149},{},[150],{"type":27,"value":151},"demotes wf4's explicit four-question navigation",{"type":27,"value":153}," to an\nimplicit ordering rule. It then adds the one first-class question nobody had built: ",{"type":22,"tag":30,"props":155,"children":156},{},[157],{"type":27,"value":158},"Activity —\n\"what happened?\"",{"type":22,"tag":95,"props":160,"children":162},{"id":161},"_12-four-structural-mechanisms",[163],{"type":27,"value":164},"1.2 Four structural mechanisms",{"type":22,"tag":23,"props":166,"children":167},{},[168,173,175,181,183,188],{"type":22,"tag":30,"props":169,"children":170},{},[171],{"type":27,"value":172},"(a) Persona-first navigation.",{"type":27,"value":174}," ",{"type":22,"tag":43,"props":176,"children":178},{"className":177},[],[179],{"type":27,"value":180},"FleetSeatNav5",{"type":27,"value":182}," lists five seats; the active seat expands to a\n",{"type":22,"tag":121,"props":184,"children":185},{},[186],{"type":27,"value":187},"flat",{"type":27,"value":189}," list of its pages. No feature mega-menu, no question-group headers. The nav answers exactly\none thing — \"who am I\" — and gets out of the way.",{"type":22,"tag":23,"props":191,"children":192},{},[193,206,208,213,215,220,222,227],{"type":22,"tag":30,"props":194,"children":195},{},[196,198,204],{"type":27,"value":197},"(b) Per-seat lensing (",{"type":22,"tag":43,"props":199,"children":201},{"className":200},[],[202],{"type":27,"value":203},"?seat",{"type":27,"value":205},").",{"type":27,"value":207}," The deep pages are ",{"type":22,"tag":121,"props":209,"children":210},{},[211],{"type":27,"value":212},"shared",{"type":27,"value":214},", but each re-leads by seat. The same\nFleet Overview shows Finance spend-at-risk first, Security control-coverage first, Executive the\ngovernance index, Engineering instrumentation\u002Flatency, Compliance framework conformance. This is the\ncore efficiency of the app: ",{"type":22,"tag":30,"props":216,"children":217},{},[218],{"type":27,"value":219},"one fleet, one data model, five different first questions",{"type":27,"value":221}," — not five\nduplicated apps. Duplication across seats becomes a ",{"type":22,"tag":121,"props":223,"children":224},{},[225],{"type":27,"value":226},"feature",{"type":27,"value":228}," (the right lead per role), not debt.",{"type":22,"tag":23,"props":230,"children":231},{},[232,237,239,244,246,251],{"type":22,"tag":30,"props":233,"children":234},{},[235],{"type":27,"value":236},"(c) The implicit lifecycle arc.",{"type":27,"value":238}," The four questions (Assurance → Effectiveness → Security →\nIdentity & Access → Admin) survive only as the ",{"type":22,"tag":30,"props":240,"children":241},{},[242],{"type":27,"value":243},"order",{"type":27,"value":245}," of pages within a seat — ",{"type":22,"tag":121,"props":247,"children":248},{},[249],{"type":27,"value":250},"alive → working →\nsafe → accountable → traced → wired",{"type":27,"value":252},". The escalation still shapes the experience; it's just no\nlonger furniture you have to read. (This was the explicit ask: less explicit than wf4, which made\nthe questions a visible second navigation plus an Orientation tutorial page.)",{"type":22,"tag":23,"props":254,"children":255},{},[256,261,263,269,271,276,278,283,285,290,292,297],{"type":22,"tag":30,"props":257,"children":258},{},[259],{"type":27,"value":260},"(d) The value-first page contract.",{"type":27,"value":262}," Every page opens with ",{"type":22,"tag":43,"props":264,"children":266},{"className":265},[],[267],{"type":27,"value":268},"WirePagePurpose",{"type":27,"value":270},": a ",{"type":22,"tag":30,"props":272,"children":273},{},[274],{"type":27,"value":275},"purpose",{"type":27,"value":277}," (why\nthe page exists \u002F what question it answers), a computed ",{"type":22,"tag":30,"props":279,"children":280},{},[281],{"type":27,"value":282},"bottom line",{"type":27,"value":284}," (the \"so what\" for this fleet\n",{"type":22,"tag":121,"props":286,"children":287},{},[288],{"type":27,"value":289},"right now",{"type":27,"value":291},"), and a recommended ",{"type":22,"tag":30,"props":293,"children":294},{},[295],{"type":27,"value":296},"next action",{"type":27,"value":298},". A page articulates value before it renders a table.",{"type":22,"tag":95,"props":300,"children":302},{"id":301},"_13-two-cross-cutting-design-laws",[303],{"type":27,"value":304},"1.3 Two cross-cutting design laws",{"type":22,"tag":306,"props":307,"children":308},"ul",{},[309,335],{"type":22,"tag":310,"props":311,"children":312},"li",{},[313,318,319,325,327,333],{"type":22,"tag":30,"props":314,"children":315},{},[316],{"type":27,"value":317},"Honesty — known vs guessed.",{"type":27,"value":174},{"type":22,"tag":43,"props":320,"children":322},{"className":321},[],[323],{"type":27,"value":324},"est",{"type":27,"value":326}," cost badges, ghosted \"not yet built\" cards, shadow agents\npriced worst-case, \"observed not verified,\" \"evidence not conformance,\" and outcome signals tagged\n",{"type":22,"tag":43,"props":328,"children":330},{"className":329},[],[331],{"type":27,"value":332},"measured | inferred | none",{"type":27,"value":334},". The app never shows a guessed number as if it were measured.",{"type":22,"tag":310,"props":336,"children":337},{},[338,343,344,349,351,356],{"type":22,"tag":30,"props":339,"children":340},{},[341],{"type":27,"value":342},"The distilled ↔ full-record pairing.",{"type":27,"value":174},{"type":22,"tag":30,"props":345,"children":346},{},[347],{"type":27,"value":348},"Findings",{"type":27,"value":350}," is the curated worklist; ",{"type":22,"tag":30,"props":352,"children":353},{},[354],{"type":27,"value":355},"Activity Log",{"type":27,"value":357}," is\nthe exhaustive record behind it. They link bidirectionally, so a user can always move from \"what\nneeds a human\" to \"what actually happened.\"",{"type":22,"tag":95,"props":359,"children":361},{"id":360},"_14-page-inventory-by-seat-23-pages",[362],{"type":27,"value":363},"1.4 Page inventory by seat (23 pages)",{"type":22,"tag":23,"props":365,"children":366},{},[367,369,374],{"type":27,"value":368},"Each seat opens on a ",{"type":22,"tag":30,"props":370,"children":371},{},[372],{"type":27,"value":373},"seat overview",{"type":27,"value":375}," (a launchpad: lensed KPIs + a \"your surfaces\" card grid),\nthen a flat, arc-ordered list of deep pages:",{"type":22,"tag":377,"props":378,"children":379},"table",{},[380,399],{"type":22,"tag":381,"props":382,"children":383},"thead",{},[384],{"type":22,"tag":385,"props":386,"children":387},"tr",{},[388,394],{"type":22,"tag":389,"props":390,"children":391},"th",{},[392],{"type":27,"value":393},"Seat",{"type":22,"tag":389,"props":395,"children":396},{},[397],{"type":27,"value":398},"Deep pages (in nav order)",{"type":22,"tag":400,"props":401,"children":402},"tbody",{},[403,424,440,456,478],{"type":22,"tag":385,"props":404,"children":405},{},[406,415],{"type":22,"tag":407,"props":408,"children":409},"td",{},[410],{"type":22,"tag":30,"props":411,"children":412},{},[413],{"type":27,"value":414},"Security · CISO",{"type":22,"tag":407,"props":416,"children":417},{},[418,420],{"type":27,"value":419},"Agent Inventory · Findings · Security Posture · Data Protection · Policy & Enforcement · Agent Identity · Teams & Users · ",{"type":22,"tag":30,"props":421,"children":422},{},[423],{"type":27,"value":355},{"type":22,"tag":385,"props":425,"children":426},{},[427,435],{"type":22,"tag":407,"props":428,"children":429},{},[430],{"type":22,"tag":30,"props":431,"children":432},{},[433],{"type":27,"value":434},"Finance · FinOps",{"type":22,"tag":407,"props":436,"children":437},{},[438],{"type":27,"value":439},"Cost Center · Usage Limits · Showback · Teams & Users · Fleet Overview",{"type":22,"tag":385,"props":441,"children":442},{},[443,451],{"type":22,"tag":407,"props":444,"children":445},{},[446],{"type":22,"tag":30,"props":447,"children":448},{},[449],{"type":27,"value":450},"Executive",{"type":22,"tag":407,"props":452,"children":453},{},[454],{"type":27,"value":455},"Governance & ROI Board · Fleet Overview · Cost Center · Usage Limits · Effectiveness · Security Posture",{"type":22,"tag":385,"props":457,"children":458},{},[459,467],{"type":22,"tag":407,"props":460,"children":461},{},[462],{"type":22,"tag":30,"props":463,"children":464},{},[465],{"type":27,"value":466},"Engineering · Platform",{"type":22,"tag":407,"props":468,"children":469},{},[470,472,476],{"type":27,"value":471},"Agent Inventory · Effectiveness · Performance · Usage Limits · Policy & Enforcement · ",{"type":22,"tag":30,"props":473,"children":474},{},[475],{"type":27,"value":355},{"type":27,"value":477}," · Integrations",{"type":22,"tag":385,"props":479,"children":480},{},[481,489],{"type":22,"tag":407,"props":482,"children":483},{},[484],{"type":22,"tag":30,"props":485,"children":486},{},[487],{"type":27,"value":488},"Compliance · Privacy",{"type":22,"tag":407,"props":490,"children":491},{},[492,494,498],{"type":27,"value":493},"Compliance & Frameworks · Findings · Data Protection · Agent Identity · Showback · ",{"type":22,"tag":30,"props":495,"children":496},{},[497],{"type":27,"value":355},{"type":27,"value":477},{"type":22,"tag":23,"props":500,"children":501},{},[502,508],{"type":22,"tag":43,"props":503,"children":505},{"className":504},[],[506],{"type":27,"value":507},"agent-profile",{"type":27,"value":509}," sits outside the nav as a drill target reachable from every roster.",{"type":22,"tag":95,"props":511,"children":513},{"id":512},"_15-the-new-question-value-cycle-history-4",[514],{"type":27,"value":515},"1.5 The new-question value (cycle-history §4)",{"type":22,"tag":306,"props":517,"children":518},{},[519,549],{"type":22,"tag":310,"props":520,"children":521},{},[522,527,529,534,536,541,543,548],{"type":22,"tag":30,"props":523,"children":524},{},[525],{"type":27,"value":526},"Effectiveness (\"is it working?\")",{"type":27,"value":528}," — kept as a persona surface (Eng\u002FExec) and ",{"type":22,"tag":30,"props":530,"children":531},{},[532],{"type":27,"value":533},"woven outward",{"type":27,"value":535},":\nan \"Is it working?\" card on the agent profile and an ",{"type":22,"tag":30,"props":537,"children":538},{},[539],{"type":27,"value":540},"\"Are the agents earning their keep?\"",{"type":27,"value":542}," ROI\nline on the Executive board (success rate, intervention, ",{"type":22,"tag":30,"props":544,"children":545},{},[546],{"type":27,"value":547},"spend-per-successful-task",{"type":27,"value":205},{"type":22,"tag":310,"props":550,"children":551},{},[552,557,559,564],{"type":22,"tag":30,"props":553,"children":554},{},[555],{"type":27,"value":556},"Activity (\"what happened?\")",{"type":27,"value":558}," — the ",{"type":22,"tag":30,"props":560,"children":561},{},[562],{"type":27,"value":563},"net-new build",{"type":27,"value":565},": a reconstructed agent → action → target →\noutcome decision log (filter by family \u002F flagged-only \u002F ties-to-a-finding), event-volume timeline,\nper-agent rollup, and the honest \"shadow agents leave no trail\" gap. Seat-lensed: Security =\nincident response, Compliance = the why-trail behind controls, Engineering = trace a run to the\nbreak.",{"type":22,"tag":85,"props":567,"children":568},{},[],{"type":22,"tag":89,"props":570,"children":572},{"id":571},"part-2-how-well-does-wf5-serve-each-seat",[573],{"type":27,"value":14},{"type":22,"tag":23,"props":575,"children":576},{},[577,579,584],{"type":27,"value":578},"Scoring: ",{"type":22,"tag":30,"props":580,"children":581},{},[582],{"type":27,"value":583},"Served",{"type":27,"value":585}," = how completely the seat's daily job is covered (◐ partial \u002F ● strong \u002F ★ core).\nGrounded in Phase-1 scoring and the seat-composition gap backlog, reconciled against what wf5 ships.",{"type":22,"tag":95,"props":587,"children":589},{"id":588},"_21-security-ciso-strongest-seat-now-with-its-forensic-loop-closed",[590],{"type":27,"value":591},"2.1 Security · CISO — ★ strongest seat, now with its forensic loop closed",{"type":22,"tag":23,"props":593,"children":594},{},[595,600,602,607,609,613,615,620,622,627,629],{"type":22,"tag":30,"props":596,"children":597},{},[598],{"type":27,"value":599},"Their job:",{"type":27,"value":601}," govern agent behavior, posture, and credentials — and prove it.\n",{"type":22,"tag":30,"props":603,"children":604},{},[605],{"type":27,"value":606},"What wf5 gives them:",{"type":27,"value":608}," the complete control loop — Inventory (who) → Findings (what needs a human)\n→ Posture (how safe, with Hardening-ROI fix-first) → Data Protection (what data) → Policy &\nEnforcement (what's allowed, with an Enforce dry-run) → Identity (credentials) → ",{"type":22,"tag":30,"props":610,"children":611},{},[612],{"type":27,"value":355},{"type":27,"value":614},"\n(what actually happened). Findings lead by ",{"type":22,"tag":121,"props":616,"children":617},{},[618],{"type":27,"value":619},"enforceability",{"type":27,"value":621}," — ungoverned-agent findings jump the\nqueue because you can't make a fix stick outside the governance boundary.\n",{"type":22,"tag":30,"props":623,"children":624},{},[625],{"type":27,"value":626},"Assessment:",{"type":27,"value":628}," the best-served seat, and wf5 closes its single biggest hole — there was no\n\"replay what this agent did\" trail for incident response; now there is, bridged directly from\nFindings.\n",{"type":22,"tag":30,"props":630,"children":631},{},[632],{"type":27,"value":633},"Remaining gaps:",{"type":22,"tag":635,"props":636,"children":637},"ol",{},[638,662,672],{"type":22,"tag":310,"props":639,"children":640},{},[641,646,648,653,655,660],{"type":22,"tag":30,"props":642,"children":643},{},[644],{"type":27,"value":645},"Capability & Action Authorization matrix",{"type":27,"value":647}," — \"what each agent ",{"type":22,"tag":121,"props":649,"children":650},{},[651],{"type":27,"value":652},"may",{"type":27,"value":654}," do\" (tool\u002Faction allow-list)\nis only ",{"type":22,"tag":121,"props":656,"children":657},{},[658],{"type":27,"value":659},"hinted",{"type":27,"value":661}," inside Policy & Enforcement; it deserves to be a first-class matrix (fold-in, not\na new page).",{"type":22,"tag":310,"props":663,"children":664},{},[665,670],{"type":22,"tag":30,"props":666,"children":667},{},[668],{"type":27,"value":669},"Instruction \u002F prompt-change governance",{"type":27,"value":671}," — no system-prompt inventory or change control (P3).",{"type":22,"tag":310,"props":673,"children":674},{},[675,680],{"type":22,"tag":30,"props":676,"children":677},{},[678],{"type":27,"value":679},"Posture trend",{"type":27,"value":681}," exists but is projected — needs real history to be load-bearing.",{"type":22,"tag":95,"props":683,"children":685},{"id":684},"_22-finance-finops-now-served-on-both-visibility-and-control",[686,688,693],{"type":27,"value":687},"2.2 Finance · FinOps — ● now served on both visibility ",{"type":22,"tag":121,"props":689,"children":690},{},[691],{"type":27,"value":692},"and",{"type":27,"value":694}," control",{"type":22,"tag":23,"props":696,"children":697},{},[698,702,704,708,710,715,717,722,724,729,731,736,738,742,744],{"type":22,"tag":30,"props":699,"children":700},{},[701],{"type":27,"value":599},{"type":27,"value":703}," see, attribute, and control what agents cost.\n",{"type":22,"tag":30,"props":705,"children":706},{},[707],{"type":27,"value":606},{"type":27,"value":709}," Cost Center (spend by model\u002Fagent\u002Fuser\u002Fprovider, cache %, governance-tagged\nspend, honest ",{"type":22,"tag":43,"props":711,"children":713},{"className":712},[],[714],{"type":27,"value":324},{"type":27,"value":716}," labeling) → ",{"type":22,"tag":30,"props":718,"children":719},{},[720],{"type":27,"value":721},"Usage Limits",{"type":27,"value":723}," (per-axis spend ceilings with cap coverage %, an\n\"uncapped\" worklist) → Showback (risk-weighted per-identity) → Teams & Users (owner rollup). This is\nthe reversal from c15: Finance went from the biggest gap to a full seat — ",{"type":22,"tag":121,"props":725,"children":726},{},[727],{"type":27,"value":728},"visibility",{"type":27,"value":730}," (Cost Center)\nplus the ",{"type":22,"tag":121,"props":732,"children":733},{},[734],{"type":27,"value":735},"forward-looking control",{"type":27,"value":737}," (Usage Limits) it was missing.\n",{"type":22,"tag":30,"props":739,"children":740},{},[741],{"type":27,"value":626},{"type":27,"value":743}," well-served for a FinOps practitioner. The \"are we on track vs budget\" framing and\nthe uncapped-spend worklist give it a real control surface, not just a ledger.\n",{"type":22,"tag":30,"props":745,"children":746},{},[747],{"type":27,"value":633},{"type":22,"tag":635,"props":749,"children":750},{},[751,761,784],{"type":22,"tag":310,"props":752,"children":753},{},[754,759],{"type":22,"tag":30,"props":755,"children":756},{},[757],{"type":27,"value":758},"Showback ≠ chargeback.",{"type":27,"value":760}," True P&L\u002Fdepartment rollup needs an IdP\u002FSCIM join — currently projected.\nThe unattributable identities (duck.com, proxy-only) are honestly flagged but can't be billed.",{"type":22,"tag":310,"props":762,"children":763},{},[764,769,770,776,778,782],{"type":22,"tag":30,"props":765,"children":766},{},[767],{"type":27,"value":768},"Cost-efficiency per outcome.",{"type":27,"value":174},{"type":22,"tag":43,"props":771,"children":773},{"className":772},[],[774],{"type":27,"value":775},"$\u002Fsuccessful-task",{"type":27,"value":777}," now appears on the ",{"type":22,"tag":121,"props":779,"children":780},{},[781],{"type":27,"value":450},{"type":27,"value":783}," board but not\non the Finance Cost Center — Finance should own that ratio directly.",{"type":22,"tag":310,"props":785,"children":786},{},[787,792,794,800],{"type":22,"tag":30,"props":788,"children":789},{},[790],{"type":27,"value":791},"Vendor \u002F provider procurement lens",{"type":27,"value":793}," (commit\u002FDPA status, $\u002Ftoken negotiation) — ",{"type":22,"tag":43,"props":795,"children":797},{"className":796},[],[798],{"type":27,"value":799},"by_provider",{"type":27,"value":801},"\ndata exists, no dedicated surface.",{"type":22,"tag":95,"props":803,"children":805},{"id":804},"_23-executive-went-from-no-home-to-a-packaged-board-plus-the-roi-line",[806],{"type":27,"value":807},"2.3 Executive — ● went from \"no home\" to a packaged board, plus the ROI line",{"type":22,"tag":23,"props":809,"children":810},{},[811,815,817,821,823,827,829,834,836,840,842],{"type":22,"tag":30,"props":812,"children":813},{},[814],{"type":27,"value":599},{"type":27,"value":816}," one board read of governance, spend, and risk — ",{"type":22,"tag":121,"props":818,"children":819},{},[820],{"type":27,"value":692},{"type":27,"value":822}," whether the agents are worth it.\n",{"type":22,"tag":30,"props":824,"children":825},{},[826],{"type":27,"value":606},{"type":27,"value":828}," the Governance & ROI Board (governance index trended to a target, governed\n%, $-at-risk with top-N concentration, findings backlog flow, export stub) → now with an ",{"type":22,"tag":30,"props":830,"children":831},{},[832],{"type":27,"value":833},"\"Are the\nagents earning their keep?\"",{"type":27,"value":835}," effectiveness\u002FROI band → Fleet Overview, Cost Center, Usage Limits,\nSecurity Posture as drill-downs.\n",{"type":22,"tag":30,"props":837,"children":838},{},[839],{"type":27,"value":626},{"type":27,"value":841}," the clearest net-new win of the whole cycle. The board packages signals that were\nscattered across operator views, and the ROI line answers the question executives actually ask\n(value, not just safety).\n",{"type":22,"tag":30,"props":843,"children":844},{},[845],{"type":27,"value":633},{"type":22,"tag":635,"props":847,"children":848},{},[849,880],{"type":22,"tag":310,"props":850,"children":851},{},[852,857,859,864,866,878],{"type":22,"tag":30,"props":853,"children":854},{},[855],{"type":27,"value":856},"executive-home ↔ executive-board overlap.",{"type":27,"value":858}," Both still lead with the same four signals. They\nshould be split cleanly: ",{"type":22,"tag":30,"props":860,"children":861},{},[862],{"type":27,"value":863},"home = live drill hub",{"type":27,"value":865},", ",{"type":22,"tag":30,"props":867,"children":868},{},[869,871,876],{"type":27,"value":870},"board = the exportable, trended report you\ntake ",{"type":22,"tag":121,"props":872,"children":873},{},[874],{"type":27,"value":875},"to",{"type":27,"value":877}," a board.",{"type":27,"value":879}," This is the most clear-cut de-dup in the app and is still open.",{"type":22,"tag":310,"props":881,"children":882},{},[883,888,890,895],{"type":22,"tag":30,"props":884,"children":885},{},[886],{"type":27,"value":887},"Value-realized over time",{"type":27,"value":889}," — \"what governance ",{"type":22,"tag":121,"props":891,"children":892},{},[893],{"type":27,"value":894},"prevented",{"type":27,"value":896},"\" ($-at-risk avoided, incidents\naverted) would complete the ROI story; today only forward exposure is shown.",{"type":22,"tag":95,"props":898,"children":900},{"id":899},"_24-engineering-platform-operates-the-fleet-now-across-all-three-dimensions",[901],{"type":27,"value":902},"2.4 Engineering · Platform — ● operates the fleet, now across all three dimensions",{"type":22,"tag":23,"props":904,"children":905},{},[906,910,912,916,918,923,925,930,932,937,939,943,945,950,952,957,959,964,966,971,973],{"type":22,"tag":30,"props":907,"children":908},{},[909],{"type":27,"value":599},{"type":27,"value":911}," build and operate — performance, policy, pipes — and know if agents actually work.\n",{"type":22,"tag":30,"props":913,"children":914},{},[915],{"type":27,"value":606},{"type":27,"value":917}," Agent Inventory (runtime + lifecycle: active\u002Fstale\u002Fforgotten\u002Fdecommission\u002F\nshadow) → ",{"type":22,"tag":30,"props":919,"children":920},{},[921],{"type":27,"value":922},"Effectiveness",{"type":27,"value":924}," (task success, sitting ",{"type":22,"tag":121,"props":926,"children":927},{},[928],{"type":27,"value":929},"above",{"type":27,"value":931}," Performance as the outcome layer) →\nPerformance (tail-latency, slow-AND-expensive) → Usage Limits → Policy & Enforcement → ",{"type":22,"tag":30,"props":933,"children":934},{},[935],{"type":27,"value":936},"Activity\nLog",{"type":27,"value":938}," (trace a run to the break) → Integrations.\n",{"type":22,"tag":30,"props":940,"children":941},{},[942],{"type":27,"value":626},{"type":27,"value":944}," well-served across the three axes that matter — ",{"type":22,"tag":121,"props":946,"children":947},{},[948],{"type":27,"value":949},"speed",{"type":27,"value":951}," (Performance), ",{"type":22,"tag":121,"props":953,"children":954},{},[955],{"type":27,"value":956},"outcome",{"type":27,"value":958},"\n(Effectiveness), and ",{"type":22,"tag":121,"props":960,"children":961},{},[962],{"type":27,"value":963},"behavior",{"type":27,"value":965}," (Activity Log) — plus lifecycle hygiene for cleanup. The ordering\n(Effectiveness before Performance) encodes the right priority: did it work, ",{"type":22,"tag":121,"props":967,"children":968},{},[969],{"type":27,"value":970},"then",{"type":27,"value":972}," how fast.\n",{"type":22,"tag":30,"props":974,"children":975},{},[976],{"type":27,"value":633},{"type":22,"tag":635,"props":978,"children":979},{},[980,990],{"type":22,"tag":310,"props":981,"children":982},{},[983,988],{"type":22,"tag":30,"props":984,"children":985},{},[986],{"type":27,"value":987},"Agent topology \u002F delegation",{"type":27,"value":989}," — in multi-agent systems, who delegates to whom \u002F sub-agent graphs.\nEcosystem-native and entirely absent (P3).",{"type":22,"tag":310,"props":991,"children":992},{},[993,998,1000,1006,1008,1014],{"type":22,"tag":30,"props":994,"children":995},{},[996],{"type":27,"value":997},"Effectiveness depends on data the model doesn't fully carry",{"type":27,"value":999}," — most outcome signals are\n",{"type":22,"tag":43,"props":1001,"children":1003},{"className":1002},[],[1004],{"type":27,"value":1005},"inferred",{"type":27,"value":1007},", not ",{"type":22,"tag":43,"props":1009,"children":1011},{"className":1010},[],[1012],{"type":27,"value":1013},"measured",{"type":27,"value":1015},". Honestly labeled, but the surface is only as strong as the\ninstrumentation behind it.",{"type":22,"tag":95,"props":1017,"children":1019},{"id":1018},"_25-compliance-privacy-evidence-strong-now-with-the-audit-why-trail",[1020],{"type":27,"value":1021},"2.5 Compliance · Privacy — ● evidence-strong, now with the audit why-trail",{"type":22,"tag":23,"props":1023,"children":1024},{},[1025,1029,1031,1035,1037,1042,1044,1048,1050,1054,1056,1061,1063],{"type":22,"tag":30,"props":1026,"children":1027},{},[1028],{"type":27,"value":599},{"type":27,"value":1030}," prove control coverage from agent behavior — honestly.\n",{"type":22,"tag":30,"props":1032,"children":1033},{},[1034],{"type":27,"value":606},{"type":27,"value":1036}," Compliance & Frameworks (findings auto-mapped to OWASP LLM\u002FAgentic, MITRE\nATLAS, NIST AI RMF, with a previewable ",{"type":22,"tag":30,"props":1038,"children":1039},{},[1040],{"type":27,"value":1041},"evidence pack",{"type":27,"value":1043}," — masthead, scope, per-framework why-trails,\nattestation) → Findings (raw behavioral evidence) → Data Protection → Agent Identity (credential\nconformance) → Showback → ",{"type":22,"tag":30,"props":1045,"children":1046},{},[1047],{"type":27,"value":355},{"type":27,"value":1049}," (the timestamped, attributable why-trail) → Integrations\n(GRC\u002Fevidence connectors).\n",{"type":22,"tag":30,"props":1051,"children":1052},{},[1053],{"type":27,"value":626},{"type":27,"value":1055}," strongly served and ",{"type":22,"tag":121,"props":1057,"children":1058},{},[1059],{"type":27,"value":1060},"honest",{"type":27,"value":1062}," — \"evidence, not conformance\" is stated, projected vs\nlive is labeled, and the new Activity Log gives auditors the exhaustive record explainability\nregulations increasingly demand.\n",{"type":22,"tag":30,"props":1064,"children":1065},{},[1066],{"type":27,"value":633},{"type":22,"tag":635,"props":1068,"children":1069},{},[1070,1080],{"type":22,"tag":310,"props":1071,"children":1072},{},[1073,1078],{"type":22,"tag":30,"props":1074,"children":1075},{},[1076],{"type":27,"value":1077},"Agent memory & record retention \u002F data residency",{"type":27,"value":1079}," — where conversation history, agent memory,\nand vector\u002FRAG stores live, and how long they're retained. A distinct privacy mandate beyond\n\"which files were touched\"; c15 had it, c16 dropped it (P2 — the clearest Compliance add).",{"type":22,"tag":310,"props":1081,"children":1082},{},[1083,1088],{"type":22,"tag":30,"props":1084,"children":1085},{},[1086],{"type":27,"value":1087},"Content inspection",{"type":27,"value":1089}," is still a preview (secrets\u002FPII\u002Fsource scanning with graduated enforcement).",{"type":22,"tag":85,"props":1091,"children":1092},{},[],{"type":22,"tag":89,"props":1094,"children":1096},{"id":1095},"part-3-cross-cutting-strengths",[1097],{"type":27,"value":15},{"type":22,"tag":635,"props":1099,"children":1100},{},[1101,1111,1128,1138],{"type":22,"tag":310,"props":1102,"children":1103},{},[1104,1109],{"type":22,"tag":30,"props":1105,"children":1106},{},[1107],{"type":27,"value":1108},"The lens does the work.",{"type":27,"value":1110}," Per-seat lensing means the app stays small (one model, ~17 deep\npages) while feeling tailored to five very different buyers.",{"type":22,"tag":310,"props":1112,"children":1113},{},[1114,1119,1121,1126],{"type":22,"tag":30,"props":1115,"children":1116},{},[1117],{"type":27,"value":1118},"Honesty is a feature, not a disclaimer.",{"type":27,"value":1120}," Estimated costs, worst-case shadow pricing, signal\nprovenance, and \"projected\" labels make the app ",{"type":22,"tag":121,"props":1122,"children":1123},{},[1124],{"type":27,"value":1125},"trustworthy to read",{"type":27,"value":1127}," — which is itself the fourth\nquestion (Admin) made into a habit.",{"type":22,"tag":310,"props":1129,"children":1130},{},[1131,1136],{"type":22,"tag":30,"props":1132,"children":1133},{},[1134],{"type":27,"value":1135},"The Findings ↔ Activity pairing",{"type":27,"value":1137}," is a genuinely strong information-architecture idea:\ntriage and forensics are different jobs, and the app lets you move between them in one click.",{"type":22,"tag":310,"props":1139,"children":1140},{},[1141,1146],{"type":22,"tag":30,"props":1142,"children":1143},{},[1144],{"type":27,"value":1145},"Value-first headers",{"type":27,"value":1147}," keep every page answerable in one glance — stake, number, direction,\nnext action.",{"type":22,"tag":85,"props":1149,"children":1150},{},[],{"type":22,"tag":89,"props":1152,"children":1154},{"id":1153},"part-4-areas-to-improve-prioritized",[1155],{"type":27,"value":16},{"type":22,"tag":23,"props":1157,"children":1158},{},[1159,1161,1165,1167,1172],{"type":27,"value":1160},"Reconciled against ",{"type":22,"tag":52,"props":1162,"children":1163},{"href":70},[1164],{"type":27,"value":73},{"type":27,"value":1166},": wf5 has now closed\n",{"type":22,"tag":30,"props":1168,"children":1169},{},[1170],{"type":27,"value":1171},"all three P1 adds",{"type":27,"value":1173}," (Usage Limits ≈ budgets, Effectiveness ≈ task outcomes, Activity Log). What\nremains:",{"type":22,"tag":95,"props":1175,"children":1177},{"id":1176},"p1-structural-sharpening-no-new-data-needed",[1178],{"type":27,"value":1179},"P1 — structural sharpening (no new data needed)",{"type":22,"tag":306,"props":1181,"children":1182},{},[1183,1193,1203],{"type":22,"tag":310,"props":1184,"children":1185},{},[1186,1191],{"type":22,"tag":30,"props":1187,"children":1188},{},[1189],{"type":27,"value":1190},"De-dup executive-home vs executive-board.",{"type":27,"value":1192}," Make home the live drill hub; board the exportable,\ntrended report. Highest-leverage cleanup; affects the primary Executive buyer.",{"type":22,"tag":310,"props":1194,"children":1195},{},[1196,1201],{"type":22,"tag":30,"props":1197,"children":1198},{},[1199],{"type":27,"value":1200},"Resolve seat-home vs seat-lensed fleet-overview overlap.",{"type":27,"value":1202}," Both lead with the same KPIs across\nevery seat. Decide: home = thin launchpad, fleet-overview = the dashboard — or merge.",{"type":22,"tag":310,"props":1204,"children":1205},{},[1206,1211,1213,1217],{"type":22,"tag":30,"props":1207,"children":1208},{},[1209],{"type":27,"value":1210},"Promote the Capability & Action Authorization matrix",{"type":27,"value":1212}," inside Policy & Enforcement (fold-in):\n\"what each agent ",{"type":22,"tag":121,"props":1214,"children":1215},{},[1216],{"type":27,"value":652},{"type":27,"value":1218}," do\" is the input to \"is it safe\" and is only hinted today.",{"type":22,"tag":95,"props":1220,"children":1222},{"id":1221},"p2-one-net-new-surface-one-buyer",[1223],{"type":27,"value":1224},"P2 — one net-new surface, one buyer",{"type":22,"tag":306,"props":1226,"children":1227},{},[1228,1238],{"type":22,"tag":310,"props":1229,"children":1230},{},[1231,1236],{"type":22,"tag":30,"props":1232,"children":1233},{},[1234],{"type":27,"value":1235},"Agent Memory & Records \u002F Data Residency & Retention",{"type":27,"value":1237}," (Compliance) — the clearest remaining\nnet-new; a distinct privacy mandate the model can partly support today.",{"type":22,"tag":310,"props":1239,"children":1240},{},[1241,1246],{"type":22,"tag":30,"props":1242,"children":1243},{},[1244],{"type":27,"value":1245},"Cost-per-successful-task on the Finance Cost Center",{"type":27,"value":1247}," — the ROI ratio currently only lives on the\nExecutive board; Finance should own it. Small lift (the data exists post-Effectiveness).",{"type":22,"tag":95,"props":1249,"children":1251},{"id":1250},"p3-ecosystem-roadmap",[1252],{"type":27,"value":1253},"P3 — ecosystem \u002F roadmap",{"type":22,"tag":306,"props":1255,"children":1256},{},[1257,1267,1277],{"type":22,"tag":310,"props":1258,"children":1259},{},[1260,1265],{"type":22,"tag":30,"props":1261,"children":1262},{},[1263],{"type":27,"value":1264},"Agent Topology \u002F Delegation",{"type":27,"value":1266}," (Engineering) — sub-agent\u002Fdelegation graph for multi-agent systems.",{"type":22,"tag":310,"props":1268,"children":1269},{},[1270,1275],{"type":22,"tag":30,"props":1271,"children":1272},{},[1273],{"type":27,"value":1274},"Instruction \u002F Prompt Governance",{"type":27,"value":1276}," (Security) — system-prompt inventory + change control.",{"type":22,"tag":310,"props":1278,"children":1279},{},[1280,1285],{"type":22,"tag":30,"props":1281,"children":1282},{},[1283],{"type":27,"value":1284},"Real history",{"type":27,"value":1286}," to make the projected trends (posture, findings backlog, outcome trend)\nload-bearing rather than illustrative.",{"type":22,"tag":95,"props":1288,"children":1290},{"id":1289},"open-product-question",[1291],{"type":27,"value":1292},"Open product question",{"type":22,"tag":306,"props":1294,"children":1295},{},[1296],{"type":22,"tag":310,"props":1297,"children":1298},{},[1299,1304,1306,1311],{"type":22,"tag":30,"props":1300,"children":1301},{},[1302],{"type":27,"value":1303},"Activity Log placement.",{"type":27,"value":1305}," It currently appears on three seats (Security\u002FEngineering\u002FCompliance)\nwith a seat-lensed register. If \"what happened?\" is a ",{"type":22,"tag":121,"props":1307,"children":1308},{},[1309],{"type":27,"value":1310},"universal",{"type":27,"value":1312}," concern, it could instead be a\nsingle shared destination (like fleet-overview). Decide based on whether the three registers are\ndifferent enough to justify three entries.",{"type":22,"tag":85,"props":1314,"children":1315},{},[],{"type":22,"tag":89,"props":1317,"children":1319},{"id":1318},"part-5-seat-scorecard",[1320],{"type":27,"value":17},{"type":22,"tag":377,"props":1322,"children":1323},{},[1324,1349],{"type":22,"tag":381,"props":1325,"children":1326},{},[1327],{"type":22,"tag":385,"props":1328,"children":1329},{},[1330,1334,1339,1344],{"type":22,"tag":389,"props":1331,"children":1332},{},[1333],{"type":27,"value":393},{"type":22,"tag":389,"props":1335,"children":1337},{"align":1336},"center",[1338],{"type":27,"value":583},{"type":22,"tag":389,"props":1340,"children":1341},{},[1342],{"type":27,"value":1343},"wf5's headline win",{"type":22,"tag":389,"props":1345,"children":1346},{},[1347],{"type":27,"value":1348},"Top remaining gap",{"type":22,"tag":400,"props":1350,"children":1351},{},[1352,1377,1402,1426,1449],{"type":22,"tag":385,"props":1353,"children":1354},{},[1355,1362,1367,1372],{"type":22,"tag":407,"props":1356,"children":1357},{},[1358],{"type":22,"tag":30,"props":1359,"children":1360},{},[1361],{"type":27,"value":414},{"type":22,"tag":407,"props":1363,"children":1364},{"align":1336},[1365],{"type":27,"value":1366},"★",{"type":22,"tag":407,"props":1368,"children":1369},{},[1370],{"type":27,"value":1371},"Activity Log closes the forensic loop",{"type":22,"tag":407,"props":1373,"children":1374},{},[1375],{"type":27,"value":1376},"Capability\u002Faction authorization matrix",{"type":22,"tag":385,"props":1378,"children":1379},{},[1380,1387,1392,1397],{"type":22,"tag":407,"props":1381,"children":1382},{},[1383],{"type":22,"tag":30,"props":1384,"children":1385},{},[1386],{"type":27,"value":434},{"type":22,"tag":407,"props":1388,"children":1389},{"align":1336},[1390],{"type":27,"value":1391},"●",{"type":22,"tag":407,"props":1393,"children":1394},{},[1395],{"type":27,"value":1396},"Usage Limits adds forward control",{"type":22,"tag":407,"props":1398,"children":1399},{},[1400],{"type":27,"value":1401},"Showback → chargeback (IdP join)",{"type":22,"tag":385,"props":1403,"children":1404},{},[1405,1412,1416,1421],{"type":22,"tag":407,"props":1406,"children":1407},{},[1408],{"type":22,"tag":30,"props":1409,"children":1410},{},[1411],{"type":27,"value":450},{"type":22,"tag":407,"props":1413,"children":1414},{"align":1336},[1415],{"type":27,"value":1391},{"type":22,"tag":407,"props":1417,"children":1418},{},[1419],{"type":27,"value":1420},"Board + \"earning their keep?\" ROI line",{"type":22,"tag":407,"props":1422,"children":1423},{},[1424],{"type":27,"value":1425},"home\u002Fboard de-dup; value-realized trend",{"type":22,"tag":385,"props":1427,"children":1428},{},[1429,1436,1440,1445],{"type":22,"tag":407,"props":1430,"children":1431},{},[1432],{"type":22,"tag":30,"props":1433,"children":1434},{},[1435],{"type":27,"value":466},{"type":22,"tag":407,"props":1437,"children":1438},{"align":1336},[1439],{"type":27,"value":1391},{"type":22,"tag":407,"props":1441,"children":1442},{},[1443],{"type":27,"value":1444},"Effectiveness + Activity Log (outcome + behavior)",{"type":22,"tag":407,"props":1446,"children":1447},{},[1448],{"type":27,"value":987},{"type":22,"tag":385,"props":1450,"children":1451},{},[1452,1459,1463,1468],{"type":22,"tag":407,"props":1453,"children":1454},{},[1455],{"type":22,"tag":30,"props":1456,"children":1457},{},[1458],{"type":27,"value":488},{"type":22,"tag":407,"props":1460,"children":1461},{"align":1336},[1462],{"type":27,"value":1391},{"type":22,"tag":407,"props":1464,"children":1465},{},[1466],{"type":27,"value":1467},"Evidence pack + audit why-trail",{"type":22,"tag":407,"props":1469,"children":1470},{},[1471],{"type":27,"value":1472},"Memory\u002Frecords retention & residency",{"type":22,"tag":23,"props":1474,"children":1475},{},[1476,1481,1483,1488,1490,1495,1497,1501],{"type":22,"tag":30,"props":1477,"children":1478},{},[1479],{"type":27,"value":1480},"Bottom line:",{"type":27,"value":1482}," wf5 serves all five seats well and is the strongest pass of the cycle — the persona\nstructure is right, the lensing keeps it lean, and the three P1 surfaces are now all built. The\nremaining work is mostly ",{"type":22,"tag":30,"props":1484,"children":1485},{},[1486],{"type":27,"value":1487},"sharpening",{"type":27,"value":1489}," (two de-dups, one fold-in) plus ",{"type":22,"tag":30,"props":1491,"children":1492},{},[1493],{"type":27,"value":1494},"two targeted net-new\nsurfaces",{"type":27,"value":1496}," (Compliance records-retention, Finance cost-per-outcome). It's ready to graduate its lead\npages — Executive Board, Cost Center, Agent Inventory\u002Fprofile, and ",{"type":22,"tag":30,"props":1498,"children":1499},{},[1500],{"type":27,"value":355},{"type":27,"value":1502}," — to the Phase-3\nhi-fi mockups.",1794599425663]