Governed Task Automation

The governance risk in task automation is quiet privilege escalation. A task performed by a person is bounded by that person's entitlements; the same task automated may run under a service identity with broader access, because that was simpler to configure. The automation then reaches content the original human could not, and nobody notices because nothing failed. Governed automation binds the automated task to the same entitlement as the human process it replaced.

Audiences and roles in Centralpoint bound what any process can reach, automated or not, so a task running on a person's behalf is constrained by that person's entitlements rather than by a service account's. Where the automated step involves AI, the retrieval surface is computed the same way it would be for the human — which is the only arrangement under which automating a task does not change what it can see.