A Unified Policy Architecture (UPA): The Governance Kernel for Enterprise AI Operating Systems

• URL: http://arxiv.org/abs/2609.06543v1
• Date: Sun, 06 Sep 2026 11:33:51 GMT
• Title: A Unified Policy Architecture (UPA): The Governance Kernel for Enterprise AI Operating Systems
• Abstract summary: This paper introduces the Unified Policy Architecture (UPA), a governance architecture for Enterprise AI Operating Systems.<n>UPA provides a unified policy model for governing AI and agents, tools, provenance, memory, enterprise resources, and agent-to-agent interactions.<n>We present UPA's governance model, declarative policy language foundations, policy evaluation semantics, plugins, industry policy packs, and an evaluation framework for enterprise governance.
• Score: 0.0
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Enterprise AI is evolving into an Enterprise Operating System where autonomous AI agents can plan, reason, use memory, invoke tools, execute workflows, and collaborate with other agents. This shift creates a new governance challenge: existing authorization, security, guardrails, and compliance mechanisms are fragmented and are not designed to govern autonomous AI as a unified system. This paper introduces the Unified Policy Architecture (UPA), a governance architecture for Enterprise AI Operating Systems. UPA provides a unified policy model for governing AI and agents, tools, workflows, memory, enterprise resources, and agent-to-agent interactions and enterprise business rules. It extends policy control beyond authorisation to include runtime obligations, human approvals, compliance, audit evidence, and governance evaluation. We present UPA's governance model, declarative policy language foundations, policy evaluation semantics, extensible plugins, industry policy packs, and an evaluation framework for enterprise governance. We also identify extensions for multi-agent coordination, provenance-aware policies, and stateful runtime governance. UPA provides a foundation for building secure, accountable, and governable Enterprise Operating Systems for autonomous AI.

Related papers

• AGL-1: The Enterprise AI Governance Layer as a Control Plane for Trusted Enterprise Intelligence [0.0]
  This paper introduces AGL-1, the Enterprise AI Governance Layer, as a vendor-neutral reference model for the control plane.<n>It defines seven governance domains: identity-aware retrieval, policy enforcement, management, memory governance, knowledge integrity monitoring, agentic execution control, and trust observability.
  arXiv  Detail & Related papers  (2026-07-03T17:42:08Z)
• Deontic Policies for Runtime Governance of Agentic AI Systems [2.1095754823099657]
  We propose AgenticRei, which realizes key governance requirements such as obligations, dispensations, policy conflict resolutions, and reasoning over policies.<n>Our approach composes naturally with industry-standard frameworks like A2AS.
  arXiv  Detail & Related papers  (2026-06-17T18:02:07Z)
• Foundation Protocol: A Coordination Layer for Agentic Society [78.01727114524464]
  Foundation Protocol (FP) is a graph-first coordination layer for an emerging human-AI society.<n>FP unifies heterogeneous entities, including agents, tools, resources, humans, institutions, and organizations.<n>The aim is to keep autonomous agency composable while keeping accountability non-negotiable.
  arXiv  Detail & Related papers  (2026-05-22T04:20:35Z)
• ClawLess: A Security Model of AI Agents [34.70695138834452]
  We present ClawLess, a security framework that enforces formally verified policies on AI agents.<n>ClawLess formalizes a fine-grained security model over system entities, trust scopes, and permissions.<n>This approach bridges the formal security model with practical enforcement, ensuring security regardless of the agent's internal design.
  arXiv  Detail & Related papers  (2026-04-07T12:19:55Z)
• AI Governance Control Stack for Operational Stability: Achieving Hardened Governance in AI Systems [0.0]
  This paper introduces the AI Governance Control Stack for Operational Stability, a layered governance architecture designed to ensure traceable and resilient AI system behavior.<n>The proposed control stack integrates six complementary governance layers: system-of-record version governance, evidence-based verification, decision-time explainability logging, telemetry monitoring, model drift detection, and governance escalation.
  arXiv  Detail & Related papers  (2026-03-12T19:01:42Z)
• From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents [36.1914922430313]
  We present a taxonomy of threats spanning cognitive manipulation, physical environment disruption, and multi-agent systemic failures.<n>The findings aim to guide the development of multilayered, autonomy-aware defense architectures for trustworthy AI agent systems.
  arXiv  Detail & Related papers  (2026-03-08T06:45:28Z)
• Toward Autonomous O-RAN: A Multi-Scale Agentic AI Framework for Real-Time Network Control and Management [39.17062930275755]
  This article proposes a multi-scale agentic AI framework for Open Radio Access Networks (O-RAN)<n>It organizes RAN intelligence as a coordinated hierarchy across the Non-Real-Time (Non-RT), Near-Real-Time (Near-RT), and Real-Time (RT) control loops.<n>We show how these agents cooperate through standardized O-RAN interfaces and telemetry.
  arXiv  Detail & Related papers  (2026-02-15T12:34:01Z)
• The PBSAI Governance Ecosystem: A Multi-Agent AI Reference Architecture for Securing Enterprise AI Estates [0.0]
  This paper introduces the Practitioners Blueprint for Secure AI (PBSAI) Governance Ecosystem.<n>PBSAI is a multi agent reference architecture for securing enterprise and hyperscale AI estates.
  arXiv  Detail & Related papers  (2026-02-11T19:21:35Z)
• A Technical Policy Blueprint for Trustworthy Decentralized AI [29.298499284846844]
  We propose a Technical Policy Blueprint that encodes governance requirements as policy-as-code objects.<n>We are proposing a Technical Policy Blueprint that separates asset policy verification from asset policy enforcement.
  arXiv  Detail & Related papers  (2025-12-07T21:27:48Z)
• Enabling Regulatory Multi-Agent Collaboration: Architecture, Challenges, and Solutions [30.046299694187855]
  Large language models (LLMs)-empowered autonomous agents are transforming both digital and physical environments by enabling adaptive, multi-agent collaboration.<n>We propose a blockchain-enabled layered architecture for regulatory agent collaboration, comprising an agent layer, a blockchain data layer, and a regulatory application layer.<n>Our approach establishes a systematic foundation for trustworthy, resilient, and scalable regulatory mechanisms in large-scale agent ecosystems.
  arXiv  Detail & Related papers  (2025-09-11T07:46:00Z)
• Towards Agentic AI Networking in 6G: A Generative Foundation Model-as-Agent Approach [35.05793485239977]
  We propose AgentNet, a novel framework for supporting interaction, collaborative learning, and knowledge transfer among AI agents.<n>We consider two application scenarios, digital-twin-based industrial automation and metaverse-based infotainment system, to describe how to apply AgentNet.
  arXiv  Detail & Related papers  (2025-03-20T00:48:44Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.