The Sovereign Agency Grid
Abstract
The value of an agent is fixed, not by its speed, but by where the operator stands relative to the loop and by the cost of operator validation of what the agent has done. We arrange agentic behavior on two axes, the operator’s proximity to the loop and the agent’s expertise, and read two laws off the arrangement. The Sovereignty Level rises as neural flow control displaces the symbolic harness. The Law of Agentic Friction, an inverse of Amdahl’s Law, fixes the maximum system speedup at the reciprocal of the human operator’s share of the work. The two laws meet at the corner of maximum autonomy, where value is greatest and verification is no longer possible. That corner is the Observer’s Paradox.
1. Two axes
Agentic behavior resolves on two axes. Operational Mode fixes the human’s proximity to the loop. Relational Persona fixes the agent’s capability or internalized expertise. The grid crosses them and each cell names a working relationship together with the cost of verifying the agent’s output.
| Mode | Intern | Contractor | Peer | Expert |
|---|---|---|---|---|
| HITL | Dictate (P) | Direct (P) | Jam (NP) | Shadow (IP) |
| HOTL | Audit (P) | Manage (NP) | Align (IP) | Govern (EXP) |
| HOOTL | Test (NP) | Utility (IP) | Proxy (EXP) | Oracle (EXP+) |
The class in parentheses is the cost of verifying the agent’s output. P is verification a human completes in polynomial time. NP is work that is hard to produce and easy to check. IP is verification carried as an interactive proof between human and agent. EXP is verification run to exponential cost. EXP+ is verification that has ceased to be feasible.
Two gradients run beneath the names. Flow control, written \(\Phi\), rises from the upper left to the lower right, from the intern whose every branch is dictated to the oracle that generates its own goals. Human arbitration, written \(\Gamma_H\), falls along the same diagonal, and the share of liability a human can hold falls with it. The upper-left corner is cheap to govern and worth little. The lower-right corner is the reverse.
2. The locus of sovereignty
Sovereignty is a question of flow control: what or who determines the next action. We distinguish all software systems as either agent, harness, or other. The grid has three loci.
- Agent. A software system whose flow control is determined by a neural network.
- Harness. A software system whose flow control is determined by symbolic, that is, by non-neural logic: code, explicit conditionals, a state machine, etc. Both agent and harness may be deterministic or non-deterministic.
- Operator. People supply the meaning and the objective function that neither agent nor harness generates for itself.
An agentic system is a division of flow control among the three. The Sovereignty Level measures how far that division has shifed from operator toward agent.
3. Operational modes
The mode fixes how much of the operator’s time the task consumes.
- HITL, human in the loop. A task cycle completes only on a human decision. Human time scales with task time: \(\Delta t_{\text{human}} \propto \Delta t_{\text{task}}\).
- HOTL, human on the loop. The agent drives the cycles; the human monitors telemetry and holds a veto. Human time falls far below task time: \(\Delta t_{\text{human}} \ll \Delta t_{\text{task}}\).
- HOOTL, human out of the loop. The loop closes algorithmically. The human is a beneficiary or an observer: \(\Delta t_{\text{human}} \to 0\).
Moving down the modes is the chief means to scale, for the reason §6 makes precise.
4. Relational personas
The persona records how far the agent’s competence, \(\Phi\), stands from the human’s, \(H\).
- Intern. \(\Phi \ll H\). The human micromanages; verification is trivial.
- Contractor. \(\Phi \approx H\). Work decouples into modules the agent runs inside a rigid harness.
- Peer. \(\Phi \leftrightarrow H\). Agent and operator negotiate, and the trust this requires is what turns verification into an interactive proof.
- Expert. \(\Phi \gg H\). The agent dominates, and verification enters exponential territory.
The last case is the Verification Gap: the agent is correct more often than the human can afford to check. The gap is the central difficulty of the grid, and §7 shows it is unavoidable.
5. Sovereignty and liability
The Sovereignty Level of an agent is a calculated state, not a disposition. It marks the point at which neural flow control outpaces the symbolic harness.
\[S = \frac{\Phi \cdot \Omega_{\text{int}} \cdot \kappa}{\Gamma_H \cdot \Delta V}\]The terms are these. \(\Phi\), flow control, is the ratio of neural branching to programmatic logic. \(\Omega_{\text{int}}\), intrinsic teleology, is the degree to which the agent generates its own goals. \(\kappa\), action compression, is the ratio of output to input, that is, how much consequence each instruction carries. \(\Gamma_H\), human arbitration, is the weight of human override authority. \(\Delta V\), the verification gap, is the computational cost of proving the output correct. Sovereignty rises as autonomy and leverage grow and as human arbitration and the affordability of verification fall.
Liability is conserved.
\[L_{\text{human}} + L_{\text{system}} + L_{\text{residual}} = 1\]As sovereignty rises, the human’s share falls toward zero, leaving an Accountability Void: a system acting with consequence that no party is positioned to answer for. The void is not a side effect of the framework. It is what the upper reach of the grid is.
6. The law of agentic friction
Agent system efficiency is strictly bounded by the proportion of human oversight the work requires.
The bound is Amdahl’s Law read from the other end. Amdahl treated the serial fraction of a computation as the part that parallelism cannot touch. Here the serial fraction is the operator. Let \(h\) be the fraction of task time that requires human arbitration, and let \(a\) be the speedup of the agent on the autonomous remainder, \(1 - h\). The system speedup is the reciprocal of the time the work still takes.
\[S_{\max} = \frac{1}{\dfrac{1 - h}{a} + h}\]As the agent grows arbitrarily fast, \(a \to \infty\), the autonomous term vanishes and the speedup approaches a ceiling fixed entirely by the human.
\[\lim_{a \to \infty} S_{\max} = \frac{1}{h}\]A process that keeps a human in the loop for a tenth of its duration is capped at tenfold, and the most powerful machine available changes nothing. Scaling past the ceiling is not an engineering problem to be solved within a mode. It requires moving the human to a lower mode, from operator to monitor to beneficiary, which is to say reducing \(h\) itself.
7. The observer’s paradox
Reducing \(h\) carries a cost the grid has been tracking all along. Drive \(h\) toward zero and efficiency rises to its maximum in the Oracle corner. The verification cost rises with it, to EXP and past it, until the human’s ability to confirm the outcome is reduced to nothing. The two move together by construction: the same autonomy that removes the human from the loop removes the human’s ability to verify results.
The most value an agent can return is, therefore, only had by surrendering the most control, and at the point of maximum value the correctness of the agent can no longer be proved. This is the terminal state of the grid. It is a transition from management to faith.
8. Operating the grid
A cell is a policy, not a label. WunderOS compiles each cell to a supervisor specification that its Shadow Agents enforce (see PLRN-004). The specification names the controllable events an agent may emit without human arbitration. Promotion to a lower mode is an explicit, audited edit to that specification, never a drift, because the friction law makes the temptation to drift constant: every point of \(h\) surrendered is speedup gained.
% An action is autonomous when the cell permits it and no veto is held.
autonomous(Agent, Action) :-
cell(Agent, Mode, Persona),
permits(Mode, Persona, Action),
not veto(Agent, Action).
permits(hootl, expert, _). % Oracle: unrestricted, EXP+ verification
permits(hotl, expert, Action) :- reversible(Action). % Govern: veto-gated, EXP verification
The specification is the place where a position in the grid becomes a commitment about liability. The supervisor that permits an Oracle to act is also the record of who decided to stop checking.
Open questions
A few questions of keen interest are deferred here.
Calibrating the verification gap. \(\Delta V\) is treated here as a complexity class. Whether a tenant’s actual verification cost tracks the worst case, or sits well below it for the actions that matter, is an empirical question and the one most worth answering.
Partial autonomy within a cell. The grid assigns one mode to a task. Real tasks mix steps at different modes. Whether the right unit is the task, the step, or the committed plan is unsettled.
Measuring h. The Law of Agentic Friction is exact given \(h\). Estimating \(h\) for a real process, before automating it, is not, and an estimate that is wrong by a factor of two is wrong about the ceiling by a factor of two.
A note on method
Written in conversation with Claude Opus 4.8 (Anthropic) as structured interlocutor and prose editor. The framework, the claims, and the architectural commitments are mine.
Kendall Clark · k@pentad.ai
—Great Falls, Virginia
May 2026