Governance principles

Agents can work. They cannot self-approve.

Axiomorix separates doing the work from deciding whether that work is trusted, approved, and allowed to move.

The doctrine

Five rules for consequential agent work.

01

Bound authority

Define the request, permitted systems, data, tools, and limits before an agent acts.

Access follows scope.
02

Separate production from review

The worker that creates an output cannot be the authority that certifies it.

No self-review.
03

Require explicit approval

Consequential work pauses until a person or defined policy decides it can move.

Execution is not approval.
04

Preserve evidence

Keep the request, output, review, approval, and resulting action connected.

Every decision leaves a record.
05

Keep human responsibility

Governance helps people make and defend decisions; it does not erase accountability.

Oversight stays in the path.
Trust and limits

The path creates evidence—not certainty.

Axiomorix makes authority and decisions clearer. It should not be described as a magic guarantee or a substitute for the people accountable for the work.

What the model establishes
  • A defined boundary for agent work
  • Independent review before consequential movement
  • An explicit approval state
  • Traceable evidence of the final decision
What it does not guarantee
  • Perfect output from every model or tool
  • Universal compliance in every environment
  • Prevention of every unsafe action
  • A replacement for human responsibility
Doctrine in one workflow

What each rule produces along the way.

This compact example follows one illustrative coding request. It shows the artifact or decision created at each stage—not a live customer record or a claim of production availability.

Illustrative request · CODE-1842Fix authentication regression
Production deploy blocked
  1. 01Scope

    Limit the coding agent to api-server and src/auth/**. Production deploy stays blocked.

    Boundary artifactScope manifest · SCOPE-1842
  2. 02Produce

    The worker prepares the refresh-token fix inside the permitted repository boundary.

    Worker outputPatch · commit a91ef2
  3. 03Review

    Independent checks evaluate tests, types, security findings, and out-of-scope changes.

    Review artifactEvidence bundle · 3 checks
  4. 04Approve

    An engineering lead reviews the patch and evidence before allowing promotion.

    Human decisionApproved for staging
  5. 05Record

    The boundary, output, evidence, approver role, and resulting action stay connected.

    Recorded actionRelease record · REL-1842
Apply the doctrine

Start with the decision an agent cannot make.

Bring one workflow and identify its boundary, reviewer, approval point, and required evidence.