Nominal control is insufficient
Approved tools, access rules, runtime monitoring and audit evidence remain necessary. They do not reveal whether a human retained an independent basis for judgment.
Decision causality must become visible
Management needs to know where AI influenced an action, where context was compressed, what boundary applied and what consequence followed.
Control must end in remediation
Visibility without restored command is observation. Effective control requires evidence, escalation, boundary changes and management action that prevent the same failure from becoming habitual.