Research into two-party agentic delivery
Service continuity, shared dependency exposure, manual fallback, incident recovery, harm repair, model substitution, portability, and provider exit.
AAO-015 / Resilience and Exit
Infrastructure providers should sell a defined support service with explicit authority limits and demonstrated recovery. The offer must explain its dependencies and evidence without implying that cybersecurity guidance certifies autonomous critical control.
AAO-011 / Resilience and Exit
Executives should authorize containment and restoration as separate decisions across the buyer and provider. The mandate must establish who can stop harmful action, how acceptable service continues, and who can approve a controlled restart.
AAO-007 / Resilience and Exit
Service managers should test emergency suspension as a sequence of observable events. A contractual stop right is usable only when the command reaches every relevant action path and the firms can establish what has stopped.