A Unified Policy Architecture (UPA): The Governance Kernel for Enterprise AI Operating Systems

arXiv:2609.06543v1 Announce Type: new Abstract: Enterprise AI is evolving into an Enterprise Operating System where autonomous AI agents can plan, reason, use memory, invoke tools, execute workflows, and collaborate with other agents. This shift creates a new governance challenge: existing authorization, security, guardrails, and compliance mechanisms are fragmented and are not designed to govern autonomous AI as a unified system. This paper introduces the Unified Policy Architecture (UPA), a governance architecture for Enterprise AI Operating Systems. UPA provides a unified policy model for governing AI and agents, tools, workflows, memory, enterprise resources, and agent-to-agent interactions and enterprise business rules. It extends policy control beyond authorisation to include runtime obligations, human approvals, compliance, audit evidence, and governance evaluation. We present UPA's governance model, declarative policy language foundations, policy evaluation semantics, extensible plugins, industry policy packs, and an evaluation framework for enterprise governance. We also identify extensions for multi-agent coordination, provenance-aware policies, and stateful runtime governance. UPA provides a foundation for building secure, accountable, and governable Enterprise Operating Systems for autonomous AI.

Related

• Governing Execution Risk in Agentic AI Systems: A Trajectory-Guided Framework for Red Teaming
• The Agent Operating System (AOS): A Reference Operating Architecture for Distributed Agentic Systems
• Managed Autonomy at Runtime: Gear-Based Safety and Governance for Single- and Multi-Agent Cyber-Physical Systems
• CAGE-1: Control, Assurance, and Governance Evaluation for Enterprise Agentic AI

Source: arXiv cs.AI | 2026-09-10