The agent control plane begins after the prompt

Anthropic's June 2026 report says the growth of Claude Code and Cowork has made sessions increasingly agentic and long-running, requiring new methods that classify outputs and examine usage at finer time intervals. For an operator, this implies that transcript review is becoming an incomplete control surface. A workflow can sound reasonable while producing the wrong file, acting against stale data, or failing silently between systems.

Artifact type changes the appropriate degree of delegation. Anthropic found that building a website leaves more to the model's judgment than translating a document, where the result is more constrained by the supplied text. Operators should therefore assign controls by task ambiguity and consequence: deterministic transformations can receive broader execution scope, while open-ended construction needs staged acceptance criteria and stronger review.

Microsoft describes a progression from AI assistance to agents acting as digital colleagues and eventually running business processes while humans set direction and resolve exceptions. The transition between those phases should not be based on model enthusiasm. It should be earned through observed completion quality, stable exception rates, reversible actions, and a known rollback path.

NIST describes AI risk management as something incorporated into the design, development, use, and evaluation of AI systems. Applied operationally, governance is not a policy document added after deployment. It is the architecture of the loop: scoped data access, explicit action boundaries, provenance for inputs, approval gates for consequential actions, evaluation of outputs, and records that support recovery.

Stanford reports both rapid capability gains and continuing difficulty with complex reasoning. That combination creates a specific management risk: the system may be capable enough to receive broad authority before it is reliable enough to deserve it. Model capability and operating permission must remain separate decisions.