01 · Authority
Can each material agent action be traced to a grant from an accountable human or governing body?
Model risk, operational resilience and third-party oversight. Start with the diagnostic: no email, no organisation name, and a forwardable result.
Can each material agent action be traced to a grant from an accountable human or governing body?
Can policy refuse the action before it lands, or does monitoring discover the problem afterward?
Can a reviewer reconstruct the authority, policy, inputs and versions months later?