AAO-015 / Resilience and Exit
Bounded Authority and Recovery in Infrastructure Agent Services
Infrastructure providers should sell a defined support service with explicit authority limits and demonstrated recovery. The offer must explain its dependencies and evidence without implying that cybersecurity guidance certifies autonomous critical control.