Governance · Control catalog
Open Nua Agent 治理控制栈
Open Nua Agent 治理控制栈
五个连续执行面展示 Open Nua 如何在意图与身份、能力准入、边界分派、运行干预和证据运营环节实施 Agent 治理，并标明当前完整安全系统与 Managed Runtime 仍是缺口。
一次执行从意图进入证据链
ENFORCEMENT SURFACE
ENFORCED CONTROLS
OWNER · TIMING
L05
证据与运营
evidence & operations
Lifecycle journal · Usage ledger · Quality facts
终态不可回退；聚合、诊断与治理权限分离
Desktop / Gateway / Backend
POST-RUN · MINIMIZED
L04
运行干预与恢复
intervene & recover
HITL · Cancel · Lease · Checkpoint · Unknown outcome
Resume 使用新 execution；未知副作用不自动重放
Host + Runtime
IN-FLIGHT · HUMAN
L03
受控边界分派
bounded dispatch
Scoped token · Gateway proxy · Restricted browser broker
无任意 upstream URL、Host IPC 或原始 CDP 通道
Main + Gateway
DISPATCH · CODE
L02
Capability 准入
capability admission
Audience · Operation · Risk · Context · Idempotency
Plugin 声明能力；Host 从已验签包重新解析并确认
Manifest + Host
PRE-CALL · CODE/HUMAN
L01
意图与执行身份
intent & identity
Thread · Interaction · Execution · Source · Sequence
Entitlement、Turn context 与 UI setting 分离
Desktop Main
TURN START · CODE
本地链路已实现的关键控制面
当前缺口：统一安全 policy 与组织级 Managed Runtime
GOVERN THE EXECUTION · NOT THE PROMPT ALONE