Autonomy boundaries named as a primary control
Across NIST AI RMF, OWASP LLM, and CSA Agentic AI, explicit autonomy boundaries are now named as a primary control, not a nice-to-have.
Sources: src.owasp.llm_top10.v1_1, src.csa.agentic_ai.v2025, src.nist.ai_rmf.v1_0