Agency Papers

The intellectual
foundation of
governed autonomy.

Governed autonomy is not a product category. It is an engineering discipline. These papers establish the argument, define the architecture, and demonstrate the practice.

Lex
Foundation

The argument. The law. The evidence.

Three documents. The first argues why behavioral governance alone cannot scale — and what architecture must replace it. The second maps empirical claims to documented research. The constitutional specification — what valid implementation requires — follows in the section below.

Position Paper · v2.3 · July 2026

The Agency Paradox:
Governed Autonomy as Infrastructure

Autonomous agents require a control plane that is separate from the acting system, deterministic in its authority, and continuously observable by a human principal. This control-plane pattern is not new. Distributed software systems have already developed much of it. The discipline has not yet been applied to autonomous AI agents. That is the gap.

Updated in v2.3: threat model boundary, knowledge substrate integrity, and Constraint composition semantics — with a tenth implementation criterion.

Read the Paper →
CC BY 4.0 — Stephen Sweeney

“The question of command is not a behavioral question. It is an architectural one.”

The Agency Paradox, §1

“The agent acts. The system governs. The principal commands.”

The Agency Paradox, conclusion
Evidence Annex · v1.0 · July 2026

Empirical Grounding
for the Agency Paradox

A traceability document, not a literature review. Maps each v2.3 amendment to documented research — alignment faking, memory poisoning, policy composition — with explicit boundaries on what the evidence does and does not establish.

Companion to v2.3. Claim-traceability table: Documented, Precedent, Open.

Read the Evidence Annex →
CC BY 4.0 — Stephen Sweeney

“Evidence flows upward; claims do not flow downward.”

Empirical Grounding, revision policy
Constitutional Framework

The Codex.

Where the argument becomes law. The AgentVector Codex is the constitutional specification that every jurisdiction implements — the criteria by which any valid implementation can be evaluated.

Constitutional Framework · v2.0 · March 2026

The AgentVector Codex

The constitutional framework underlying every jurisdiction: composable Laws, language-specific enforcement kernels, and domain governance for governed autonomy. The Codex does not argue for governance. It specifies what governance requires — in terms precise enough to be evaluated, audited, and replayed.

Eleven Laws in four groups. Three enforcement kernels. Four reference domain jurisdictions. Each implementation is evaluable against the ten criteria defined in the Agency Paradox.

Read the Codex → Law registry → Full Spec · MacSweeney.Tech ↗
Derives from the Agency Paradox · MIT License
Ten implementation criteria
01Separation of governance from execution
02Determinism
03Fail-closed default
04Compositional evidence
05Composition-aware evaluation
06Documented Constraint composition semantics
07Substrate independence
08Principal observability
09Knowledge substrate integrity and currency
10Bounded execution surface
Relationship to the Agency Paradox
The Paradox argues why. The Codex defines what. Every implementation is measured against both.
Governing Autonomy · Essay Series

Cloud-native systems already
built the discipline AI needs.

Essays making a single argument from different angles, written for platform engineers who know Kubernetes and are beginning to grapple with AI agents in production.

3 published
01
Law at the Edge
The multi-kernel architectural thesis. Where governance compiles.
Read →
02
SwiftVector: The Reference Kernel
Why the reference implementation is built in Swift.
Read →
03
The Conformance Contract
How JSON fixtures prove enforcement equivalence across kernels.
Read →

Forthcoming Kubernetes Is a Governance System · GitOps Is Operational Law · Audit as Architecture

Next

Take the argument into a real room.

The papers make the case. The field operations show the same Laws enforced in aviation, desktop agents, and authorship.