CSAIChaptersEventsBlog
Help shape industry research on deployment challenges, coverage gaps, and program effectiveness. Take the survey by July 16 →
Open Peer Review Tag

Operationalizing the Agentic Control Plane: Integrating the AARM Specification

Open Until: 07/10/2026

Operationalizing the Agentic Control Plane: Integrating the AARM Specification
The CSA Agentic Control Plane (ACP) defines the governance framework through which AI agents are orchestrated, monitored, and controlled across a ten-layer reference architecture, but this paper focuses specifically on how the Autonomous Action Runtime Management (AARM) specification fulfills the ACP's runtime enforcement capability. AARM is an open system specification comprising seven components — Action Mediation, Context Accumulation, Policy Engine, Approval Service, Deferral Service, Receipt Generation, and Telemetry Export — that together intercept, evaluate, enforce, and audit agent actions prior to execution. By mapping each AARM component to its corresponding ACP function, architecture layer, and AICM control domain, the paper demonstrates that AARM serves as the concrete, implementable runtime enforcement core of the ACP, completing a layered governance model in which the CSA reference architecture supplies the structural framework, the ACP supplies the governance vision, and AARM makes that vision operational.

The peer review period has concluded. Stay tuned for the release of the final document!

Featured by CSA

Want to see your content featured here?

Contact us to learn more!

Explore More of CSA

Research & Best Practices

Stay informed about the latest best practices, reports, and solutions in cloud security with CSA research.

Upcoming Events & Conferences

Stay connected with the cloud security community by attending local events, workshops, and global CSA conferences. Engage with industry leaders, gain new insights, and build valuable professional relationships—both virtually and in person.

Training & Certificates

Join the countless professionals who have selected CSA for their training and certification needs.

Industry News

Stay informed with the latest in cloud security news - visit our blog to keep your competitive edge sharp.