NIST NCCoE agent identity and authorization concept work
- Evidence role
- Official concept work supporting explicit identity and authorization boundaries.
- Source
- Open the source →
Evidence and sources
Evidence behind the production decision.
DecisionGraph Weekly™ · September 7–12, 2026. Evidence supports the direction; economics, platform choice and control architecture remain workload-specific.
Governed decision: AA-P2P-DD-2026-09-08-01 · Publication: DGW-2026-09-12
U.S. GAO AI acquisition lessons
- Evidence role
- Official acquisition evidence supporting full-cost, sustainment, alternative and termination analysis.
- Source
- Open the source →
NIST monitoring deployed AI systems
- Evidence role
- Official monitoring evidence supporting bounded evaluation and continuing review.
- Source
- Open the source →
Microsoft least privilege for AI agents
- Evidence role
- Vendor-primary implementation pattern; not independent proof of universal effectiveness.
- Source
- Open the source →
Confidence and what could change the decision
These sources inform the analysis; they do not establish a universal ROI, payback, superior platform or production-readiness result. Costs and controls require workload-specific evidence. Source summaries are concise and attributed; restricted or unresolved source expression remains excluded.
The approved posture remains ACT + EVALUATE. Production-admission evidence strengthened, while implementation remains workload-specific. Expected outcomes are hypotheses to test, not observed ZAPHAN customer outcomes.