{
  "id": "artifact:the-agent-is-not-the-product-the-control-plane-is",
  "slug": "the-agent-is-not-the-product-the-control-plane-is",
  "title": "The Agent Is Not the Product. The Control Plane Is.",
  "thesis": "The more useful an agent becomes, the less its safety can depend on the agent behaving well. The durable product is the governed execution environment around it.",
  "abstract": "The durable architecture includes identity isolation, bounded authority, secret separation, execution containment, mutation gates, independent observability, evidence, and recovery. Security is the mechanism that permits greater autonomy by bounding blast radius.",
  "topics": [
    "agent-security",
    "control-planes",
    "bounded-authority",
    "observability",
    "recovery"
  ],
  "date": "2026-07-23",
  "dateLabel": "Source dated",
  "published": false,
  "publicationState": "PREVIEW_READY",
  "updated": "2026-07-23",
  "sourceDates": {
    "created": "2026-07-23",
    "updated": "2026-07-23"
  },
  "kind": "Three complete perspectives",
  "sourceFamily": "SharePlane Platform",
  "href": "artifacts/the-agent-is-not-the-product-the-control-plane-is/index.html",
  "contextHref": "records/the-agent-is-not-the-product-the-control-plane-is/context.txt",
  "recordHref": "records/the-agent-is-not-the-product-the-control-plane-is/work.json",
  "receiptHref": "records/the-agent-is-not-the-product-the-control-plane-is/receipt.json",
  "packageHref": "downloads/works/the-agent-is-not-the-product-the-control-plane-is.zip",
  "canonicalUrl": "https://shareplane.malott.ai/artifacts/the-agent-is-not-the-product-the-control-plane-is/",
  "sources": [
    {
      "id": "source:87:openai-incident",
      "type": "primary-incident-disclosure",
      "title": "OpenAI incident disclosure",
      "locator": "https://openai.com/index/hugging-face-model-evaluation-security-incident/",
      "role": "Clarifies that the incident occurred during an aggressive cyber evaluation with production safeguards reduced.",
      "description": "Use the original OpenAI and Hugging Face disclosures as primary evidence.",
      "publiclyExposed": true
    },
    {
      "id": "source:87:hugging-face-incident",
      "type": "primary-incident-disclosure",
      "title": "Hugging Face disclosure",
      "locator": "https://huggingface.co/blog/security-incident-july-2026",
      "role": "Separates confirmed facts from inference.",
      "description": "Use the original OpenAI and Hugging Face disclosures as primary evidence.",
      "publiclyExposed": true
    },
    {
      "id": "source:87:gpt-5-6",
      "type": "primary-system-card",
      "title": "OpenAI GPT-5.6 system card and external evaluation findings",
      "locator": "https://deploymentsafety.openai.com/gpt-5-6",
      "role": "current-operating primary source",
      "description": "OpenAI GPT-5.6 system card and external evaluation findings.",
      "publiclyExposed": true
    },
    {
      "id": "source:87:owasp-agent-security",
      "type": "authoritative-security-guidance",
      "title": "AI Agent Security - OWASP Cheat Sheet Series",
      "locator": "https://cheatsheetseries.owasp.org/cheatsheets/AI_Agent_Security_Cheat_Sheet.html",
      "role": "Supports least-privilege tools, isolated execution, explicit approval for high-impact actions, authenticated agent communication, bounded resource usage, structured logging, and separate authorization from model output.",
      "description": "current authoritative agent-security and zero-trust guidance where materially useful.",
      "publiclyExposed": true
    },
    {
      "id": "source:github:shareplane-next:239",
      "type": "transferred-semantic-provenance",
      "title": "SharePlane Next Issue #239",
      "locator": "https://github.com/pinklon/pinklon-shareplane-next/issues/239",
      "role": "Provenance record for original semantic development, evidence decisions, three completed public-copy routes, primary-route selection, and public-safe boundary.",
      "description": "Frozen provenance only; not implementation, queue, branch, merge, or production authority.",
      "publiclyExposed": true
    },
    {
      "id": "source:github:shareplane-platform:87",
      "type": "governing-issue",
      "title": "SharePlane Platform Issue #87",
      "locator": "https://github.com/pinklon/shareplane-platform/issues/87",
      "role": "Canonical implementation authority for exact locked sources and the approved Creative Lock.",
      "description": "Authorizes isolated deterministic implementation through protected exact-head owner review only.",
      "publiclyExposed": true
    }
  ],
  "posture": "Three complete argument paths over the same locked thesis and evidence, transferred from frozen SharePlane Next Issue #239 to canonical Platform Issue #87.",
  "media": [],
  "schema": "shareplane.portable-work.v1",
  "author": {
    "name": "Tony Malott",
    "url": "https://malott.ai/"
  },
  "content": {
    "mediaType": "text/plain",
    "path": "records/the-agent-is-not-the-product-the-control-plane-is/context.txt",
    "sha256": "3f0ce962a846c66f16d4129475461f2d55342f7c40e6688f585863394f8125ab",
    "complete": true,
    "extraction": "Native presentation reading order; scripts, styles, and platform chrome excluded."
  },
  "relationships": [
    {
      "source": "artifact:the-agent-is-not-the-product-the-control-plane-is",
      "target": "artifact:stop-prompting-agents-start-managing-workers",
      "type": "companion",
      "group": "companions",
      "label": "Stop Prompting Agents. Start Managing Workers.",
      "explanation": "Autonomy Is a Promotion, Not a Feature Toggle is the source phrase; the Platform target is Stop Prompting Agents. Start Managing Workers."
    }
  ],
  "representations": {
    "html": "artifacts/the-agent-is-not-the-product-the-control-plane-is/index.html",
    "text": "records/the-agent-is-not-the-product-the-control-plane-is/context.txt",
    "json": "records/the-agent-is-not-the-product-the-control-plane-is/work.json",
    "package": "downloads/works/the-agent-is-not-the-product-the-control-plane-is.zip"
  }
}