Governance Outside the Loop: Runtime Control, Action Receipts and Named Owners | 10.16.26

Two new papers argue for the same architectural move from different directions: pull governance out of the agent loop and enforce it in a separate runtime layer, with a portable certificate proving what was authorized. A SecurityHQ and Datadog survey shows why it matters, with 76% of organizations naming an accountable owner but only 49% able to reconstruct what their agents did last month. In Brussels, the Commission is probing loss-of-control incidents while insisting the AI Act is up to the task, and a Glasgow policy post reminds us that agentic accountability is structural, not personal. Full briefing: https://blog.bearcanyonhq.com/post/governance-outside-the-loop-runtime-control-action-receipts-and-named-owners-10-16-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.