Identity topology
Human, service and agent principals; delegated authority; credential boundaries; revocation paths.
Connected systems
Applications, cloud accounts, databases, payment rails, code systems, robots, machines or mission assets in scope.
Effect policy
Which effects can occur automatically, which require approval, which are always denied and what limits apply.
Network / egress
Approved destinations, external access, data movement paths and controls against unauthorized route changes.
Observation
Execution outcomes are observed and tied back to the authority decision rather than inferred only from model output.
Operations
Incident response, revocation, failover, stop/recovery and evidence retention are tested for the deployment.