The organisational impact exceeds the model-cost impact. Roles shift: API owners become capability owners; IAM teams become delegation-and-trust teams; platform teams own registries, policy engines and observability; assurance functions need evidence standards. New SLAs cover specification freshness, token-issuance latency, sandbox fidelity, policy-evaluation availability and trace completeness. Liability shifts from what did the model know? to which principal delegated authority, under which policy, using which contract version, with what consent and audit trail? — which is why provenance, policy separation and zero trust become load-bearing. Transparency obligations include the ATRS.
Terms
Glossary terms used here: Audit trail, Consent, Provenance.