It was still written down
A capability list kept in the wrong unit, safety rules summarised out of an agent's context, and tool output that arrives reading as an instruction.
How we Organise
Cognitive capability profiling and which work should go to a machine
Six AI systems were profiled on the cognitive demands they meet. Separately, 410 employees were asked what their own work demands. The activities converged on a shared core.
We ask a client to write down which capabilities it means to keep without the machine, and date each one. Nothing here disputes that the list should exist, only the unit it is kept in. If activities share a core, a list written activity by activity splits work that is the same. A firm can hold a complete, fresh list and not know what it has retained.
How we Build
What survives when an agent’s context is compacted
A safety rule and an ordinary log compete for the same tokens, and only the rule needs its exact wording to stay enforceable. Across 20 production configurations, 53 per cent of rules survived one round of compaction. Ten per cent survived five.
Our position asks that an agent’s context be budgeted, and that the budget say what survives when the window fills. This is the first number on that, and it argues. Writing down what survives does not make it survive. A model does the compacting and has no idea which lines carry authority. The document stays current while the rule it names is paraphrased into something nobody could enforce.
How we Assure
Separating what induced an action from what authorised it
A tool’s output can stop being data and start being a command. Separate what induced an action from what authorised it, and attack success stays at or below 0.63 per cent.
We tell a client an agent should hold its own short-lived credential, no wider than the person who set it going or the task at hand. The task is not knowable when the credential is minted. It is settled at runtime by observations the credential never sees, so the test passes while the agent does something nobody asked for.