Published April 29, 2026 | Version v1

The Agentic 3 C's Framework A Reasoning-Layer Risk Governance Model for Agentic AI in Financial Services

Authors/Creators

Description

A new failure mode is emerging in agentic AI deployments: systems executing correctly against meaning that no human explicitly approved or authorized. The failure does not originate in data quality, model accuracy, or workflow design. It originates at the reasoning-layer, where agentic systems resolve context across enterprise platforms before execution. Existing governance frameworks do not yet explicitly govern how meaning is resolved at this layer prior to execution.

This paper introduces the Agentic 3 C’s Framework as the operating principles required at the reasoning-layer to enable safe, trusted agentic AI at scale in financial services. The framework establishes Context, Control, and Coordination as the three conditions under which an agentic system’s reasoning can be considered governable. Context establishes the authoritative meaning the system is permitted to resolve against. Control constrains how the system is permitted to act on that meaning. Coordination governs how meaning, authority, and execution propagate across multiple agents and enterprise systems.

The 3 C’s are positioned as the foundational operating principles that the author’s prior work implicitly relied upon. SSRN Working Paper No. 6459612 introduced Agentic Workflow Drift and Agentic Workflow Subversion as failures that occur when these principles are not enforced. SSRN Working Paper No. 6531238 introduced the Semantic Deviation Index as the runtime measurement standard that operates within Control.

This paper formalizes the 3 C’s as the framework those constructs sit within, and positions a forthcoming companion paper on the Semantic Control Plane as the runtime enforcement architecture that operationalizes the framework at scale. The paper situates the 3 C’s within existing financial services governance, including SR 11-7 model risk management, the Three Lines of Defense, and the NIST AI Risk Management Framework. It explains why Working Paper 1 DOYLE-SPARE | AGENTIC 3 C’S FRAMEWORK each existing framework leaves the reasoning-layer ungoverned and why three distinct principles, rather than any single one, are required to close the gap. The framework is offered for practitioner use, supervisory review, and continued research. 

Files

The Agentic 3 C’s Framework A Reasoning-Layer Risk Governance Model_Doyle-Spare.pdf

Additional details

Related works

Is identical to
Preprint: 10.2139/ssrn.6674761 (DOI)

Dates

Available
2026-04-29