Key concept from the book

Decision space

Inventory describes the nouns in an environment. Decision space describes the verbs: what identities, workflows, platforms, suppliers, automations, and agents can do next.

Definition from the book

Decision space is the set of meaningful actions, transitions, and future states available to a system given its authority, workflows, interfaces, and trust relationships.

From inventory to movement

Security programs are often organized around assets, identities, roles, policies, clusters, datasets, and applications. That inventory matters, but systems are compromised through movement: one action enabling another, one trusted path leading to a more consequential state.

Decision space represents that movement as a graph of meaningful next actions and future states. It includes what can be read, assumed, deployed, modified, triggered, exported, delegated, or reached after a preceding action succeeds.

Decision space versus reachability

Reachability asks what can be accessed from a starting point. Decision space asks what that access enables, how it composes with other paths, under whose authority it can be exercised, and which follow-on consequences become possible.

A path to a resource may be low consequence. A path to a control plane, secrets broker, deployment system, identity provider, or agent tool broker may let the actor rewrite the environment’s future. The graph must represent consequence, not only connectivity.

How decision space expands

Decision space grows through broad templates, inherited roles, persistent tokens, vendor integrations, cross-account trust, emergency paths, and interfaces that expose raw control-plane power. Much of that authority may remain idle, but it still defines what the system is capable of doing next.

This is why two environments with similar posture reports can carry very different risk. One may be intentionally constrained. The other may contain a much larger graph of reachable futures created through years of local, reasonable changes.

How to make it governable

Perfect enterprise simulation is not required. Start with a high-impact workflow and map the actor, current state, authority source, curated actions, valid transitions, boundary crossings, and terminal state.

The goal is to make consequential choices visible enough to decide which futures should remain reachable, which should require stronger conditions, and which should be removed from the normal path entirely.

Stay on the trajectory

Get new essays and reference material.

Book updates, new essays, and practical resources on trajectory governance—sent occasionally.