%%{init: {'flowchart': {'rankSpacing': 30, 'nodeSpacing': 12, 'subGraphTitleMargin': {'top': 8, 'bottom': 8}}}}%%
flowchart TD
%% Base styling
classDef claimBox fill:#f5f5f5,stroke:#000000,stroke-width:1px,color:#000000;
classDef phenomBox fill:#dedede,stroke:#000000,stroke-width:1.5px,color:#000000;
classDef problemBox fill:#bcbcbc,stroke:#000000,stroke-width:2px,color:#000000;
DOMAIN["Domain: Agentic AI and Cybersecurity"]
%% ==========================================
%% CLUSTER 1
%% ==========================================
subgraph T1["Cluster 1: Human Oversight vs. Automated Velocity"]
direction LR
C1["<b>Claim 1 [Practice]</b><br/><i>FinServ CISO:</i> Every agent action requires<br/>mandatory human sign-off before execution."]:::claimBox
C2["<b>Claim 2 [Challenge]</b><br/><i>Vendor Lead:</i> Mandatory sign-off makes agents useless;<br/>clients demand real-time autonomous remediation."]:::claimBox
C3["<b>Claim 3 [Question]</b><br/><i>SecOps Analyst:</i> At what operational speed does<br/>human oversight become purely nominal theater?"]:::claimBox
C1 <-.->|TENSION: Safety vs. Velocity| C2
C2 ~~~ C3
end
PH1["<b>Phenomenon 1</b><br/>Friction between operational velocity and human oversight<br/>in autonomous high-stakes execution."]:::phenomBox
KP1["<b>Knowledge Problem 1</b><br/>How can organizations balance standing autonomy and continuous auditability<br/>without bottlenecking response time?"]:::problemBox
DOMAIN --> T1
T1 --> PH1
PH1 --> KP1
%% ==========================================
%% CLUSTER 2
%% ==========================================
subgraph T2["Cluster 2: Machine Identity & Delegation Gaps"]
direction LR
C4["<b>Claim 4 [Challenge]</b><br/><i>Healthcare IT:</i> IAM infrastructure lacks any model<br/>for autonomous multi-agent delegation."]:::claimBox
C5["<b>Claim 5 [Challenge]</b><br/><i>Public Sector Lead:</i> Runbooks assume human actors;<br/>agent tasks trigger false-positive rogue alerts."]:::claimBox
C6["<b>Claim 6 [Practice]</b><br/><i>Cloud Architect:</i> We issue static admin tokens so agents<br/>can resolve cross-system infrastructure tickets."]:::claimBox
C4 ~~~ C5
C5 ~~~ C6
C4 <-.->|TENSION: Least Privilege vs. Static Escalation| C6
end
PH2["<b>Phenomenon 2</b><br/>Mismatch between legacy security architectures and<br/>non-deterministic autonomous agent workflows."]:::phenomBox
KP2["<b>Knowledge Problem 2</b><br/>How must IAM architectures evolve to govern ephemeral, non-human agency<br/>without defaulting to over-privileged service accounts?"]:::problemBox
KP1 ~~~ T2
T2 --> PH2
PH2 --> KP2
%% ==========================================
%% CLUSTER 3
%% ==========================================
subgraph T3["Cluster 3: Multi-Agent Accountability & Forensics"]
direction LR
C7["<b>Claim 7 [Challenge]</b><br/><i>Forensics Lead:</i> Tracing non-deterministic reasoning loops<br/>across interacting agents is impossible post-incident."]:::claimBox
C8["<b>Claim 8 [Question]</b><br/><i>Legal Counsel:</i> If an agent hallucinates a defensive countermeasure<br/>and breaks systems, who bears liability?"]:::claimBox
C9["<b>Claim 9 [Practice]</b><br/><i>Risk Officer:</i> We archive raw prompt-response text logs<br/>to establish defensible compliance audit trails."]:::claimBox
C7 ~~~ C8
C8 ~~~ C9
C7 <-.->|TENSION: Dynamic Reasoning vs. Static Logs| C9
end
PH3["<b>Phenomenon 3</b><br/>Opacity and causal ambiguity of multi-agent reasoning chains<br/>in post-incident digital forensics."]:::phenomBox
KP3["<b>Knowledge Problem 3</b><br/>What constitutes legally defensible forensic provenance<br/>for emergent, multi-agent autonomous decisions?"]:::problemBox
KP2 ~~~ T3
T3 --> PH3
PH3 --> KP3