{"slug": "ai-governance-moves-from-observability-to-provable-control", "title": "AI governance moves from observability to provable control", "summary": "Enterprise AI governance must shift from post-event observability to real-time, provable authorization as autonomous agents delegate tasks across systems, according to Traefik Labs CEO Sudeep Goswami and SUSE Group sovereignty strategy lead Andreas Prins, speaking on theCUBE Research's AppDevANGLE podcast. \"When you have an agent that is handing a task to another agent, that authority should shrink and not leak out,\" Goswami said, arguing that credentials alone cannot establish whether an agent is permitted to take a specific action in a given context. Prins compared the required change to the move from manual releases to CI/CD pipelines, saying organizations must \"articulate as code\" the approvals and policies governing agent-to-agent delegation.", "body_md": "### AI governance moves from observability to provable control\n\nAs artificial intelligence agents move from experimental tools into production systems, enterprise governance is being forced to answer a harder question. It is no longer enough to [know what an agent did](https://thecuberesearch.com/ai-agent-governance-is-moving-from-observability-to-provable-trust/). Organizations increasingly need to prove what the agent was authorized to do, why it was allowed to take a specific action and whether that authority remained intact as tasks moved across multiple agents and systems.\n\nThat challenge is becoming more urgent as agentic systems spread across regulated enterprises, where security, auditability and sovereignty requirements can limit reliance on external software-as-a-service control planes.\n\nIn the [latest episode](https://www.youtube.com/watch?v=84FC3nPFa-0) of theCUBE Research’s [AppDevANGLE podcast](https://www.youtube.com/playlist?list=PLenh213llmcadXuu6atcVpgRy_QDq0rvg), I spoke with [Sudeep Goswami](https://www.linkedin.com/in/sudeepgoswami/), chief executive officer of Traefik Labs Inc., and [Andreas Prins](https://www.linkedin.com/in/andreasprins/), who leads sovereignty strategy at SUSE Group, about how AI governance architectures must evolve as autonomous agents begin making decisions and delegating work across increasingly complex enterprise environments.\n\n“When you have an agent that is handing a task to another agent, that authority should shrink and not leak out,” Goswami said.\n\n### From visibility to provable authorization\n\nEnterprise observability has traditionally focused on reconstructing what happened after an event. Logs, traces and dashboards can show which systems were involved and where a failure occurred.\n\nAgentic AI introduces a different governance problem.\n\nAn autonomous system may receive authority from a human, delegate a task to another agent, invoke a tool or application programming interface and then pass part of that task to another system. Every step potentially changes the scope of what is authorized.\n\nThat means identity and credentials alone are insufficient.\n\n“Just because an agent has some credentials, is that agent allowed to make this specific action right now, given the surrounding context around it?” Goswami asked. “A simple credential cannot answer that.”\n\nThe challenge is similar to physical access control. An employee badge may authorize entry into a building, but that does not automatically grant permission to approve a financial transaction or access every system inside the organization.\n\nAI governance therefore needs to become contextual. Policies must determine what an agent can do based not only on its identity, but also on the task, environment, delegation chain and operational conditions surrounding the request.\n\nThat shift changes governance from post-event reconstruction toward real-time authorization and proof.\n\n### Agent delegation breaks traditional accountability models\n\nThe complexity increases when agents begin delegating work to other agents.\n\nTraditional enterprise access models were designed largely around humans, applications and predefined service accounts. Agentic systems introduce a chain of machine-to-machine interactions where authority can move across orchestrators, subagents, APIs and tools at machine speed.\n\nPrins compared the shift to the evolution of continuous integration and continuous delivery systems.\n\nYears ago, software teams moved from manual production releases toward automated pipelines. That required organizations to codify approvals, security checks, secrets management and release policies directly into the delivery process.\n\nAgentic AI may require a similar transition.\n\n“We go through that same thinking again,” Prins said. “Let’s rethink, and more importantly, let’s articulate as code.”\n\nThat becomes especially important as the number of enterprise agents grows.\n\nPrins described a recent conversation in which one executive discovered that an engineering organization had created approximately 8,000 agents.\n\n“If you’re unaware how many are created, you are also unaware what they’re doing and what their function is,” he said.\n\nThe implication is that agent proliferation could quickly outpace traditional governance models. Enterprises may eventually need the equivalent of software supply chain controls for agents: explicit identity, delegated authority, policy enforcement and evidence showing how each system behaved.\n\n### Policy enforcement must happen in context\n\nDefining policies is only one part of the problem. Enterprises also need mechanisms capable of enforcing those policies where agents actually interact with applications and infrastructure.\n\nThat puts the [gateway layer](https://siliconangle.com/2025/11/17/unified-gateway-model-gaining-traction-thecube/) in an increasingly important position.\n\nGoswami argued that AI governance systems need to capture both allowed and denied actions. Showing that a system successfully blocked an unauthorized action can be just as important as showing that an authorized task completed correctly.\n\n“You want to be able to showcase proof that your guardrails are working,” he said. “Which means it should allow and deny, and you want to have that entire thing in context.”\n\nThe enforcement layer can also provide a feedback loop into governance policies themselves.\n\nIf agents repeatedly attempt actions that are denied, that information may reveal poorly designed workflows, overly permissive instructions or gaps in the policy framework.\n\nThe result is a governance model where policy definition, enforcement and evidence become interconnected rather than operating as separate security functions.\n\n### Why audit logs may no longer be enough\n\nLogging has long formed the foundation of enterprise auditing, but autonomous AI introduces another trust problem: the system producing the evidence may also control that evidence.\n\nGoswami compared the issue to a vehicle odometer. If the owner of the vehicle can modify the mileage and is also the only party reporting the mileage, there is no independent way to verify whether the record has been altered.\n\nThe same issue can occur with audit logs generated by applications and vendors.\n\n“They can be tampered with, and there’s no third-party way to know when and how it was tampered,” Goswami said.\n\nCryptographic evidence can strengthen that trust model by making changes detectable. Instead of relying entirely on conventional logging, systems can cryptographically record decisions, authorization results and agent actions.\n\nBut cryptographic signing alone does not completely solve the problem.\n\nGoswami argued that enterprises also need independent verification capable of determining whether evidence has been modified after it was generated.\n\n“You need the logging capability at a cryptographic level, but then you also need a third-party verification mechanism to be able to check against it,” he said.\n\nThat turns observability data into something closer to verifiable evidence.\n\nFor highly regulated environments, the distinction could become significant. An organization may eventually need to demonstrate not only what an agent did, but also that its records could not have been altered after the fact.\n\n### Sovereignty becomes part of the governance architecture\n\nGovernance becomes more complicated when organizations cannot depend on externally hosted control planes.\n\nAccording to research cited during the conversation, 47% of respondents operate across a mix of connected and disconnected environments, while 11% deploy generative AI specifically within on-premises and air-gapped infrastructure.\n\nThat makes sovereign AI more than a regional compliance issue.\n\nOrganizations in defense, healthcare, financial services, government and other regulated industries may need to operate models, governance controls and verification infrastructure entirely within environments they control.\n\n“The moment you become dependent on a third-party SaaS service that you don’t control or it’s not in your own soil, then all bets are off,” Goswami said.\n\nPrins described sovereignty as a risk-based decision involving both the model itself and the infrastructure used to operate it.\n\nOrganizations can choose between closed frontier models, open-weight models and open-source models. Each involves different tradeoffs around transparency, ease of use and control.\n\nThe deployment environment introduces another decision.\n\nEnterprises may consume models through a SaaS provider or run them within infrastructure they manage themselves. The more sensitive the workload and data, Prins argued, the stronger the case becomes for customer-controlled infrastructure.\n\n“The more regulated, the more control you should have,” he said.\n\n### Sovereign AI requires an ecosystem\n\nThe discussion also highlighted why sovereignty is unlikely to be delivered by a single platform.\n\nAn enterprise AI stack can include models, CPUs and graphics processing units, Kubernetes infrastructure, gateways, policy engines, observability systems and evidence layers.\n\nEach component plays a different role in determining whether an organization can control and verify its AI environment.\n\n“There is no single vendor that can deliver sovereignty all by themselves,” Goswami said.\n\nThat makes interoperability and partnerships increasingly important.\n\nTraefik Labs and SUSE are approaching the problem from different layers of the stack. SUSE provides underlying infrastructure and open-source technologies, while Traefik provides gateway and agent governance capabilities.\n\nGoswami described a sovereign architecture that combines open-weight models, customer-controlled compute infrastructure, gateway-based controls, observability and an evidence or provenance layer capable of verifying agent behavior.\n\nThe broader goal is to make agentic systems easier to adopt without separating security and governance from the architecture supporting them.\n\n“The objective is to ensure that there is a high degree of secure and scalable adoption of agentic workflows in the enterprise,” he said.\n\n### The bottom line\n\nAI governance is rapidly moving beyond dashboards and retrospective audit logs.\n\nAs autonomous agents begin invoking APIs, delegating tasks and taking action across enterprise systems, organizations will need to understand not only what happened, but what authority existed at every point in the process.\n\nThat creates new architectural requirements around contextual authorization, policy enforcement, machine-to-machine identity and verifiable evidence.\n\nSovereignty adds another layer. For organizations operating in regulated, disconnected or air-gapped environments, governance capabilities may need to run entirely within customer-controlled infrastructure.\n\nThe result is a shift from observability toward provability.\n\nEnterprises adopting agentic AI will increasingly need architectures capable of answering four questions: Which agents are operating? What authority do they have? Were they permitted to take a specific action in context? And can the organization independently prove what happened afterward?\n\nThe companies that answer those questions early will be better positioned to scale agentic systems without losing control of the authorization, governance and trust models underneath them.\n\nHere’s the complete conversation with Traefik Labs’ Sudeep Goswami, SUSE’s Andreas Prins and me, part of theCUBE Research’s [AppDevANGLE podcast series](https://www.youtube.com/playlist?list=PLenh213llmcadXuu6atcVpgRy_QDq0rvg):\n\n##### Image: SiliconANGLE\n\n# A message from John Furrier, co-founder of SiliconANGLE:\n\nSupport our mission to keep content open and free by engaging with theCUBE community. **Join theCUBE’s Alumni Trust Network**, where technology leaders connect, share intelligence and create opportunities.\n\n- **15M+ viewers of theCUBE videos** , powering conversations across AI, cloud, cybersecurity and more\n- **11.4k+ theCUBE alumni** — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network\n\n### Are you an AWS customer?  Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: [https://siliconangle.com/aws-marketplace/](https://siliconangle.com/aws-marketplace/)\n\n##### **About SiliconANGLE Media**\n\n[SiliconANGLE](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552),\n\n[theCUBE Network](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da),\n\n[theCUBE Research](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f),\n\n[CUBE365](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6),\n\n[theCUBE AI](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683)and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.\n\nFounded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.", "url": "https://wpnews.pro/news/ai-governance-moves-from-observability-to-provable-control", "canonical_source": "https://siliconangle.com/2026/09/19/ai-governance-provable-control-agentic-ai-thecube-appdevangle/", "published_at": "2026-09-19 20:50:17+00:00", "updated_at": "2026-09-19 20:54:55.357236+00:00", "lang": "en", "topics": ["ai-agents", "ai-policy", "ai-safety", "artificial-intelligence"], "entities": ["Traefik Labs Inc.", "SUSE Group", "Sudeep Goswami", "Andreas Prins", "theCUBE Research", "AppDevANGLE"], "alternates": {"html": "https://wpnews.pro/news/ai-governance-moves-from-observability-to-provable-control", "markdown": "https://wpnews.pro/news/ai-governance-moves-from-observability-to-provable-control.md", "text": "https://wpnews.pro/news/ai-governance-moves-from-observability-to-provable-control.txt", "jsonld": "https://wpnews.pro/news/ai-governance-moves-from-observability-to-provable-control.jsonld"}}