Don't wait for a mythical autonomous stack; harden the substrate in stages. Short term: inventory the capability estate, publish/clean contracts, stand up a catalogue with ownership and trust metadata, add linting, mocks, sandboxes, narrow scopes and sender constraints; capture traces and provenance from day one. Medium term: a dedicated execution/control plane that separates planning from execution, validates arguments, delegates policy to OPA, and adopts workload identity. Long term: converge on agent-ready infrastructure as an institutional capability — registries, versioned retrieval, policy-as-code, evidence standards, and the federation layer.
Terms
Glossary terms used here: Policy-as-code, Provenance, Workload identity.