{"id":"https://openalex.org/W7223677007","doi":"https://doi.org/10.5281/zenodo.23657643","title":"Policy-as-Code Governance for Agentic Enterprise Workflows","display_name":"Policy-as-Code Governance for Agentic Enterprise Workflows","publication_year":2026,"publication_date":"2026-10-26","ids":{"openalex":"https://openalex.org/W7223677007","doi":"https://doi.org/10.5281/zenodo.23657643"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23657643","doi":"https://doi.org/10.5281/zenodo.23657643","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23657643","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23657643","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5159661028","display_name":"Mr.  Girish Rajagopalan Sesha","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210117535","display_name":"Cognizant (India)","ror":"https://ror.org/01x51st25","country_code":"IN","type":"company","lineage":["https://openalex.org/I163361683","https://openalex.org/I4210117535"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Mr.  Girish Rajagopalan Sesha","raw_affiliation_strings":["Cognizant Technology Solutions"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cognizant Technology Solutions","institution_ids":["https://openalex.org/I4210117535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5159661028"],"corresponding_institution_ids":["https://openalex.org/I4210117535"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.8187949,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/policy-as-code","display_name":"policy-as-code","score":0.777999997138977},{"id":"https://openalex.org/keywords/agent-governance","display_name":"agent governance","score":0.7879999876022339},{"id":"https://openalex.org/keywords/runtime-enforcement","display_name":"runtime enforcement","score":0.5799999833106995},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.6539999842643738},{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.6299999952316284},{"id":"https://openalex.org/keywords/agentdojo","display_name":"AgentDojo","score":0.5120000243186951},{"id":"https://openalex.org/keywords/open-policy-agent","display_name":"Open Policy Agent","score":0.5860000252723694},{"id":"https://openalex.org/keywords/datalog","display_name":"Datalog","score":0.5479999780654907},{"id":"https://openalex.org/keywords/failure-feedback","display_name":"failure feedback","score":0.7450000047683716},{"id":"https://openalex.org/keywords/corporate-security","display_name":"enterprise security","score":0.3529999852180481}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5378999710083008},{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.5370000004768372},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5145000219345093},{"id":"https://openalex.org/C2778738651","wikidata":"https://www.wikidata.org/wiki/Q16546687","display_name":"Novelty","level":2,"score":0.49619999527931213},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.4912000000476837},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4722999930381775},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.39579999446868896},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.3702999949455261},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.36570000648498535},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3571000099182129},{"id":"https://openalex.org/C2781415417","wikidata":"https://www.wikidata.org/wiki/Q25304581","display_name":"Incomplete contracts","level":3,"score":0.3521000146865845},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.35010001063346863},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.3172999918460846},{"id":"https://openalex.org/C55451941","wikidata":"https://www.wikidata.org/wiki/Q1783273","display_name":"Contract management","level":2,"score":0.30329999327659607},{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.2906000018119812},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.28700000047683716},{"id":"https://openalex.org/C185765463","wikidata":"https://www.wikidata.org/wiki/Q1318054","display_name":"Enterprise software","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C2775868214","wikidata":"https://www.wikidata.org/wiki/Q1208425","display_name":"Praise","level":2,"score":0.27889999747276306},{"id":"https://openalex.org/C5894958","wikidata":"https://www.wikidata.org/wiki/Q2297769","display_name":"Software agent","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C86511162","wikidata":"https://www.wikidata.org/wiki/Q8799101","display_name":"Property rights","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2556000053882599},{"id":"https://openalex.org/C138824270","wikidata":"https://www.wikidata.org/wiki/Q3318162","display_name":"Enterprise modelling","level":4,"score":0.2522999942302704}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23657643","doi":"https://doi.org/10.5281/zenodo.23657643","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23657643","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.5281/zenodo.23657644","doi":"https://doi.org/10.5281/zenodo.23657644","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23657644","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23657643","doi":"https://doi.org/10.5281/zenodo.23657643","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23657643","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7162150220","https://openalex.org/W7221768098","https://openalex.org/W7221508792","https://openalex.org/W7167632795","https://openalex.org/W7204831505","https://openalex.org/W7220373613","https://openalex.org/W7223900440","https://openalex.org/W7213609156","https://openalex.org/W7223739964","https://openalex.org/W7142557907"],"abstract_inverted_index":{"Abstract":[0],"-":[1,300],"Access":[2],"control":[3,528],"determines":[4],"whether":[5],"an":[6,28,76,82,102,138,335,354,409,456,462,471],"agent":[7,8,83,235,366,427],"governance.":[9],"The":[10,135,331,446,660],"present":[11],"question":[12],"is":[13,128,137,226,284,312,334,419,475],"narrower:":[14],"how":[15],"may":[16,357],"use":[17],"a":[18,26,31,47,149,156,201,232,250,253,260,264,268,378,384,439,605,642,656],"tool;":[19],"it":[20],"does":[21,388,404],"not":[22,148,389,405,679],"necessarily":[23],"establish":[24,95,272],"that":[25,52,61,339,413,428,608],"should":[27],"enterprise":[29,99,145,287,304,337],"represent":[30],"reviewer's":[32],"consent,":[33,323],"prevent":[34],"its":[35,132,601,610],"reviewer":[36],"approved":[37,86,639],"the":[38,41,129,144,161,174,187,227,376,401,430,463,476,613,631],"exact":[39],"action":[40,112,307],"tool":[42,403,533,635],"will":[43],"perform.":[44],"reuse":[45],"for":[46,383,395],"changed":[48],"action,":[49],"and":[50,64,85,116,123,131,181,191,196,204,208,212,244,259,267,289,350,465,483,489,494,500,517,525,532,573,576,585,621,625,645,648,667,682],"connect":[51],"consent":[53,109,154,320],"to":[54,70,236,314,360,380,399,432,600],"release":[55],"Enterprise":[56],"workflows":[57],"therefore":[58],"need":[59,377],"approval":[60,239],"authority,":[62],"commit,":[63],"user-visible":[65],"failure?":[66],"AgentDojo":[67],"remains":[68],"bound":[69],"requester,":[71],"target,":[72,415],"arguments,":[73],"relevant":[74],"supplies":[75],"adversarial":[77],"evaluation":[78,270],"setting":[79],"[10],":[80],"but":[81],"state,":[84,180],"software":[87],"versions":[88],"until":[89],"execution.":[90],"This":[91,217,474],"benchmark":[92],"alone":[93],"cannot":[94],"coverage":[96],"of":[97,125,163,234],"every":[98,197,414],"article":[100],"specifies":[101],"approval-to-execution":[103,139],"contract":[104,130,140,175,225,338,615],"with":[105,141,519,564,676],"mutation":[106,146,265],"path.":[107],"explicit":[108,152,530],"states,":[110],"non-transferable":[111],"matching,":[113],"single-use":[114],"redemption,":[115,343],"failure":[117,269,468],"feedback.":[118],"Its":[119,246],"A":[120,206,504,582,592],"Specific":[121],"contribution":[122,127,333],"limits":[124],"novelty":[126],"operational":[133],"invariants":[134],"artifact":[136],"five":[142],"at":[143],"boundary,":[147],"new":[150,391],"policy":[151,498,575,593],"commitments:":[153],"names":[155],"canonical":[157],"action;":[158],"language":[159],"or":[160,327,374,394,417,554],"invention":[162],"transaction":[164],"authorization.":[165,216],"changes":[166,429,499],"invalidate":[167],"matching;":[168],"redemption":[169,251],"rechecks":[170],"current":[171,680],"Comparisons":[172],"distinguish":[173],"from":[176,280,637],"learned":[177],"access":[178,382,488,527],"access,":[179,363],"release;":[182],"one":[183,238,241,254],"successful":[184],"commit":[185],"consumes":[186],"policies,":[188,522],"event-graph":[189],"monitoring,":[190],"Open":[192,545],"Policy":[193,301,546],"Agent":[194,547],"approval;":[195,317],"unsuccessful":[198],"attempt":[199],"returns":[200],"stable":[202],"logging":[203],"bundles.":[205],"Python":[207,516],"SQLite":[209],"demonstration":[210],"reason":[211,619],"remedy":[213],"without":[214],"weakening":[215],"matched":[218],"15":[219],"authored":[220,520,675],"scenarios.":[221],"Eight":[222],"concurrent":[223],"attempts":[224],"unit":[228],"evaluated,":[229],"rather":[230],"than":[231],"collection":[233],"redeem":[237],"produced":[240,438],"simulated":[242],"write":[243],"prompts.":[245],"testable":[247],"outputs":[248],"are":[249,588],"decision,":[252],"receipt.":[255],"Local":[256],"workload":[257],"measurements":[258],"concise":[261],"consumption":[262],"transition,":[263],"receipt,":[266],"protocol":[271],"reproducibility":[273],"while":[274],"response.":[275],"separating":[276],"demonstrated":[277],"adapter":[278,507,607],"behavior":[279],"untested":[281],"Transaction-specific":[282],"authorization":[283,294,541],"established":[285,581],"practice:":[286],"security":[288],"LLM":[290],"performance.":[291],"OAuth":[292],"rich":[293],"requests":[295],"already":[296],"carry":[297],"fine-grained":[298],"Keywords":[299],"as":[302],"code;":[303],"AI;":[305],"transaction-bound":[306],"details":[308],"[11].":[309],"No":[310],"claim":[311],"made":[313],"invent":[315],"action-bound":[316],"runtime":[318],"enforcement;":[319],"lifecycle;":[321],"feasibility":[322],"expressive":[324],"rule":[325],"evaluation,":[326],"history-aware":[328],"demonstration.":[329],"monitoring.":[330],"scoped":[332],"executable":[336,481],"allocates":[340],"approval,":[341,644],"release,":[342],"I":[344],"INTRODUCTION":[345],"AND":[346,424],"RESEARCH":[347],"QUESTION":[348],"endpoint-coverage,":[349],"feedback":[351],"responsibilities":[352,514],"around":[353],"An":[355,421],"analyst":[356],"be":[358,370],"entitled":[359],"grant":[361,402,565],"application":[362,418],"yet":[364],"still":[365,595],"proposal.":[367],"It":[368,535],"can":[369,460],"encoded":[371],"in":[372],"Rego":[373,561],"Datalog;":[375],"manager":[379],"approve":[381],"particular":[385],"contractor":[386],"paper":[387],"demonstrate":[390],"logical":[392],"expressiveness":[393],"seven":[396],"days.":[397],"Permission":[398],"call":[400],"mean":[406],"superiority":[407],"over":[408],"equivalently":[410],"configured":[411],"monitor.":[412],"duration,":[416,640],"approved.":[420],"II":[422],"METHOD":[423],"DEMONSTRATED":[425],"SCOPE":[426],"duration":[431],"30":[433],"days":[434],"after":[435],"review":[436],"has":[437,536],"different":[440],"transaction.":[441],"If":[442],"execution":[443],"accepts":[444],"only":[445],"study":[447],"follows":[448],"design-science":[449],"methods":[450],"[12],":[451],"[13]:":[452],"specify":[453,664],"'tapproval":[454],"exists,'":[455],"otherwise":[457],"valid":[458],"credential":[459],"perform":[461],"problem":[464],"artifact,":[466],"analyze":[467],"cases,":[469],"exercise":[470],"unapproved":[472],"action.":[473],"practical":[477],"gap":[478],"between":[479],"standing":[480],"model,":[482],"define":[484],"empirical":[485],"follow-up.":[486],"Secure":[487],"specific":[490],"business":[491],"consent.":[492],"development":[493],"auditing":[495],"support":[496],"controlled":[497],"traceability":[501],"[14],":[502],"[15].":[503],"local":[505],"reference":[506],"uses":[508,649],"AI":[509],"risk":[510],"management":[511],"assigns":[512],"governance":[513,597],"[1].":[515],"SQLite,":[518],"identities,":[521],"Zero":[523],"trust":[524],"attribute-based":[526],"provide":[529],"approvals,":[531],"state.":[534],"no":[537],"LLM,":[538],"OPA":[539],"service,":[540],"foundations":[542],"[2],":[543],"[3].":[544],"(OPA)":[548],"production":[549],"identity":[550],"provider,":[551],"network":[552],"endpoint,":[553],"real":[555],"access-":[556],"evaluates":[557],"structured":[558],"inputs":[559],"using":[560],"[4],":[562],"integrates":[563],"operation.":[566],"enforcement":[567,617],"applications":[568],"[5],":[569],"records":[570],"decisions":[571],"[6],":[572],"distributes":[574],"data":[577],"bundles":[578],"[7].":[579],"These":[580],"Requirement":[583],"mapping":[584],"validation":[586],"capabilities":[587],"useful":[589],"building":[590],"blocks.":[591],"result":[594],"Each":[596],"requirement":[598],"maps":[599],"owner,":[602],"authoritative":[603],"needs":[604],"trusted":[606],"enforces":[609],"conditions":[611],"when":[612],"attribute,":[614],"field,":[616],"point,":[618],"code,":[620],"target":[622],"changes.":[623],"positive":[624],"negative":[626],"fixture.":[627],"Examples":[628],"include":[629],"changing":[630],"AgentGuardian":[632],"learns":[633],"context-aware":[634],"policies":[636,666],"staging":[638],"replaying":[641],"consumed":[643],"failing":[646],"traces":[647],"control-flow":[650],"dependencies":[651],"[8].":[652],"Palumbo":[653],"et":[654],"al.":[655],"required":[657],"audit":[658],"write.":[659],"fixtures":[661],"check":[662],"internal":[663],"Datalog":[665],"monitor":[668],"event":[669,683],"graphs":[670],"against":[671],"conformance.":[672],"They":[673],"were":[674],"their":[677],"expectations,":[678],"state":[681],"history":[684],"[9].":[685],"Both":[686],"overl":[687]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-27T00:00:00"}