Control plane
The layer that authors authority, defines valid state, orchestrates workflows, and determines which actions are reachable.
From the book
Key concepts from Beyond Posture.
The book moves from diagnosis to redesign to institutionalization. These concepts explain how risk forms in dynamic systems—and how security can shape what systems are allowed to become.
StateWhere are we?
State describes what exists.
BehaviorHow did we get here?
Behavior explains how the system moved.
DecisionsWhich path was chosen?
Decisions explain the path the system took.
Trajectory governanceWhat can be chosen at all?
Govern the paths a system is allowed to take.
01
The diagnosis
See why posture is not enough.
Posture remains useful, but it cannot fully explain risk that forms through sequence, accumulation, connection, and delegated authority.
Mental model
Snapshot fallacy
Why an accurate picture of the present can still fail to explain future risk.
Explore the concept Mental modelDecision space
The meaningful actions, transitions, and future states a system can reach from here.
Explore the concept Risk patternTrust inflation
How broad, persistent, reusable trust expands faster than structural constraints can contain it.
Explore the concept
02
The redesign
Govern possibility, not only behavior.
Move security upstream—from observing conditions and correcting actions to shaping which futures are reachable in the first place.
Core framework
Trajectory governance
The practice of shaping which sequences of action are possible within a system.
Explore the concept Design principleStructural constraints
Controls embedded in architecture, authority, interfaces, and workflow so unsafe paths are not normal options.
Explore the concept Engineering primitiveAuthority foundry
A control-plane mechanism that mints bounded authority for a purpose, state, scope, and terminal condition.
Explore the concept
03
The operating model
Turn the model into practice.
Give leaders and builders a shared way to govern consequential decisions, reduce blast radius, and show that the system is structurally improving.
Governance artifact
Decision Authority Register
A shared register of consequential decisions, enforceable boundaries, curated paths, and collapse conditions.
Explore the concept MetricReachability Ratio
A practical way to measure how much of an environment an identity, workflow, integration, or agent can affect.
Explore the conceptSupporting vocabulary
The terms that make the model operational.
The concepts in the book are not isolated definitions. Together, they describe where authority is created, how safe paths are delivered, and how temporary power is designed to end.
Curated action
A supported, intent-level action that performs useful work without exposing raw control-plane power.
Paved road
A supported path that packages boundaries, authority, progression, and collapse into the way teams actually work.
Automatic collapse
The built-in termination of authority when the task, workflow, incident, deployment, export, or mission ends.
Structural closure
The condition reached when a known unsafe trajectory has been removed, narrowed, or bounded by a system change.
Stay on the trajectory
Get new essays and reference material.
Book updates, new essays, and practical resources on trajectory governance—sent occasionally.