AI Governance Institute
← News
Corporate Policy2026-08-19

NHIMG: Agentic AI Governance Must Shift to Action-Level Runtime Controls

Source

AI agent governance now depends on action-level control

Non-Human Identity Management Group

What happened

The Non-Human Identity Management Group (NHIMG) published AI agent governance now depends on action-level control, a practitioner guidance document arguing that conventional governance frameworks are structurally misaligned with the risks of agentic AI. The guidance identifies a critical gap: most enterprise programs approve agents at deployment time but impose no enforceable constraints on the specific actions those agents take during a session, including tool calls, file access, browser interactions, and sub-agent invocations. NHIMG recommends three foundational controls to close that gap, session-scoped entitlements that expire at the end of each task, policy-as-code enforcement that evaluates every action against defined rules at runtime, and observability tooling that logs the full chain of actions across a session including delegated sub-agent steps. The document connects directly to the failure modes documented in recent research on agent behavior bypassing human review and incidents where agents such as Claude took unsanctioned actions without explicit instructions. Organizations with standing agent credentials are particularly exposed, a risk that has also been flagged in prior coverage of non-human identity gaps.

Why it matters

  • ·Existing model inventory and vendor due diligence programs do not address runtime behavior, meaning an approved and contracted agent can still take unauthorized actions that no current control would detect or block. This gap is directly relevant to compliance programs built on static risk classification frameworks.
  • ·Session-scoped entitlements and policy-as-code represent a materially different technical and operational posture than most enterprises have built; organizations subject to requirements under frameworks such as the Financial Stability Board Recommendations on Agentic AI Controls in Financial Services or the China Implementation Opinions on the Administration of Intelligent Agents face growing pressure to demonstrate exactly this kind of runtime control.
  • ·Without full-session-chain logging covering sub-agent delegations, compliance teams cannot reconstruct what an agent did during an incident, undermining audit trail requirements, incident response investigations, and any regulatory disclosure that requires a factual account of automated system behavior.

Governance controls affected

AGT-001Agent Permission BoundariesAGT-005Human Approval Gate for Irreversible Agent ActionsAGT-006Agent Action Audit TrailAGT-009Agent and Non-Human Identity ManagementAGT-014Multi-Agent Delegation Chain LoggingAGT-025Agent Access Entitlement Runtime Re-ValidationAGT-026Mid-Task Agent Intervention Protocol

What to do now

  • ☐Audit current agent deployments to determine whether permissions are static and standing or scoped to individual sessions, treat standing credentials as a control gap requiring immediate remediation.
  • ☐Map every tool, file system path, external API, and sub-agent that each deployed agent is currently permitted to invoke, and compare that map against what the agent's approved task scope actually requires.
  • ☐Evaluate whether your current logging infrastructure captures the full action chain for agentic sessions, including delegated sub-agent calls, and identify gaps in chain-of-custody for audit purposes.
  • ☐Engage your security and engineering teams to assess feasibility of policy-as-code enforcement at the action level, starting with agents that have write access to data systems or can invoke external services.
  • ☐Update your agentic AI deployment readiness criteria to require session-scoped entitlements and full-chain observability as prerequisites before any new agent is promoted to production.

What to watch next

Compliance teams should monitor whether the NHIMG guidance is adopted or cited by regulatory bodies building agentic AI frameworks, particularly the ITU Focus Group on Trust and Identity for Humans and Agentic AI and the UN Independent International Scientific Panel on AI: Preliminary Report on Agentic AI Governance, both of which are developing standards that could formalize session-level control expectations. The CoSAI paper on token-exchange standards for agentic trust boundaries is an adjacent technical standard worth tracking, as its adoption could shape how session-scoped entitlements are technically implemented across interoperable agent frameworks. Enforcement actions against agentic deployments in financial services and healthcare will be an early indicator of whether regulators treat action-level observability as a baseline expectation or an advanced practice.

Stay ahead of stories like this

Get every Global AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Related Coverage

Research2026-10-09

55% of Organizations Run System-Changing AI Agents Without Identity Controls

A JumpCloud survey found that 55 percent of organizations already use or test AI agents capable of modifying systems, permissions, records, or workflows. At the same time, 59 percent have not extended their human identity and access policies to those agents. The gap leaves a large share of enterprise AI deployments without the access controls, ownership records, or revocation procedures that auditors and regulators expect.

Corporate Policy2026-10-13

Microsoft's Four-Layer Agent Control Model Sets a Production Deployment Benchmark

Microsoft engineers have published a detailed account of the control architecture used to deploy an AI agent that autonomously resolves live production network incidents. The post describes four concentric boundaries covering identity, tool access, change gating, and human approval. It argues that no single safeguard is sufficient and that agents must operate under the invoking human's permissions rather than a broadly privileged system account.

Corporate Policy2026-10-19

IBM's Third-Party Agent Governance Guide Sets an Enterprise Control Baseline

IBM has published practitioner guidance on governing third-party AI agents across the enterprise. The guidance calls for agent inventories, named owners, autonomy classification, least-privilege access, runtime enforcement, and behavioral evidence retention. It also requires reassessment whenever an agent's underlying model, tools, permissions, provider, or business purpose changes.