{
  "format": "agent-article-v0",
  "article_id": "EA-041",
  "canonical_url": "/tools/ea-041-ai-control-plane",
  "page_type": "reference",
  "claim_ids": [],
  "evidence_ids": [
    "EA-041-R11-RESEARCH",
    "EA-041-R11-WEB-READBACK"
  ],
  "unknown_ids": [
    "EA-041-UNKNOWN-01",
    "EA-041-UNKNOWN-CURRENTNESS"
  ],
  "operational_object_ids": [],
  "provider": [],
  "models": [],
  "plans": [],
  "surfaces": [],
  "regions": [],
  "current_status": "UNKNOWN",
  "observation_status": "SPEC_ONLY",
  "freshness": "UNKNOWN",
  "last_verified": null,
  "supersedes": [],
  "superseded_by": [],
  "provenance": [
    "RESCUE-001-EA0041",
    "WEBBODY-EA0041-R8-970BBAD2"
  ],
  "article_sources": [
    {
      "id": "EA-041-R11-RESEARCH",
      "evidence_class": "RESEARCH",
      "title": "EA-041 監査済みresearch / canonical revision binding",
      "supports": [
        "AI Control Plane大全"
      ],
      "limit": "canonical監査・revision bindingの存在を示す。外部ソースcurrentnessが本文またはcontrol-planeで確定していない場合は、currentnessをUNKNOWNのまま保持する。",
      "origin_class": "AUDITED_CANONICAL_RESEARCH_PACKET",
      "source_or_experiment_ids": [
        "RESCUE-001-EA0041"
      ],
      "supporting_locators": [
        "RESCUE-001-EA0041",
        "EA-041-R5-LEGACY-MIGRATION-20261008-R1",
        "content/staging/EA-041.md"
      ],
      "scope": "監査済みEA本文・canonical revision・既存Source Graph relationの範囲。欠損currentnessは推測で閉じない。",
      "provenance_status": "AUDIT_PASS_CANONICAL_BINDING"
    },
    {
      "id": "EA-041-R11-WEB-READBACK",
      "evidence_class": "IMPL",
      "title": "EA-041 Web body identity / canonical readback",
      "supports": [
        "canonical staging bodyのSHA-256一致とR9 canonical ledger readbackをProduction projectionの入力として検証する。"
      ],
      "limit": "body identity/readbackは本文claim自体の真偽や外部ソースの最新性を追加保証しない。",
      "checked_at": null,
      "origin_class": "IMPLEMENTATION_READBACK",
      "source_or_experiment_ids": [
        "WEBBODY-EA0041-R8-970BBAD2"
      ],
      "supporting_locators": [
        "WEBBODY-EA0041-R8-970BBAD2",
        "content/staging/EA-041.md",
        "EA-041-R5-LEGACY-MIGRATION-20261008-R1"
      ],
      "scope": "R9/R10 canonical readback後のProduction生成時body identity。",
      "provenance_status": "CANONICAL_READBACK_BODY_HASH_MATCH"
    }
  ],
  "research_sections": [
    {
      "heading": "公開claim",
      "text": "**ESTABLISHED** — Enterprise AIの運用では、policy distribution、runtime enforcement、identity／authorization、observability、cost／usage reconciliationを同一概念として扱わず、相互に分離して記録・検証する必要がある。設定済みcontrolは、それがruntimeで実際にenforceされた、または観測されたことの証明ではない。\n\n**ESTABLISHED** — NIST AI RMF／GenAI ProfileはAIライフサイクルのrisk-management frameworkを提供するが、vendor control-plane APIではない。\n\n**ESTABLISHED** — OPA Bundlesはpolicy／dataをenforcement componentへ配布し、application redeployなしの更新を可能にする一方、更新反映にはeventual-consistency上の考慮が残る。OPA Decision Logsはpolicy query、decision identifier、input、bundle revision等をaudit／debugへ残す実装面を持つ。\n\n**ESTABLISHED** — OpenFGAのmodeling guidanceはauthorization relationship／permissionをAI model behaviorとは別の層として扱う。FOCUS Specification 1.4はcost／usage reconciliation向けの共通billing-data schemaであり、authorization specificationではない。\n\n**PROPOSAL** — `AI_CONTROL_PLANE_V1` は本辞典のarchitecture proposalであり、industry standardとして主張しない。最小planeとして inventory／catalog、policy distribution、identity／authorization、runtime enforcement、telemetry／audit、cost／quota、lifecycle／change control を分離する。"
    },
    {
      "heading": "状態照合モデル",
      "text": "`desired_state`、`deployed_state`、`observed_effect`、`evidence_locator`、`reconciliation_status` は別フィールドとして保持する。desired configurationとdeployed configuration、observed runtime effectを同一視しない。\n\ncentral managementを採用しても、bypass、stale policy、alternate credential、direct endpointなどのfailure modeは消えない。control-plane側の設定値だけでruntime enforcementを証明しない。"
    },
    {
      "heading": "UNKNOWN",
      "text": "- tenant entitlement\n- gateway enforceability\n- provider-native emergency-stop semantics\n- organization-specific RTO／RPO\n- jurisdiction-specific logging／retention\n- AuthZEN／OpenTelemetry convention stability\n- implementation acceptance"
    },
    {
      "heading": "STOP_CONDITION",
      "text": "NISTはrisk guidance、OPA／OpenFGAはimplementation reference、FOCUSはcost schemaとして境界を保つ。これらを単一の標準control planeまたはprovider parityの証拠として扱わない。provider-specific emergency stop、tenant gate、RTO／RPO、jurisdiction loggingはUNKNOWNのまま保持する。"
    }
  ],
  "human_url": "/tools/ea-041-ai-control-plane",
  "markdown_url": "/agent/article.md?path=%2Ftools%2Fea-041-ai-control-plane",
  "json_url": "/agent/article.json?path=%2Ftools%2Fea-041-ai-control-plane"
}