I work in AI Governance and am currently doing a course on the EU AI Act, NIST, ISO 42001 etc. while building AI workflows with the ICM method. What I realize is the huge gap in Agentic AI governance. With narrow AI it was okay, GenAI made things more complicated, and with Agentic AI it's become a nightmare, from a pure governance perspective. Here are two papers I found interesting though. 1. OWASP – Top 10 for Agentic Applications OWASP's answer to agentic risk is essentially a design principle, not a control checklist: give an agent the minimum tools, permissions, and autonomy the task actually requires. They call it "least agency," analogous to least privilege in classic security. I think that most agentic failures aren't the model being wrong, they're the model being wrong while empowered to act. So you govern the action surface (which tools, which scopes, which actions need a human sign-off), not just the model output. That's something you can audit, which makes it governable. https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/ 2. Sinha et al. (2026) – Human-on-the-Loop Orchestration for AI-Assisted Legal Discovery (arXiv) The complementary piece: once an agent does act across multiple steps, errors compound silently and they call it "trajectory collapse." An early misstep propagates through every downstream decision, and endpoint metrics (precision/recall) never see it. Their answer is uncertainty-gated escalation: the agent hands over to a human only when calibrated uncertainty crosses a threshold. In their (synthetic, preliminary) simulation, routing under a quarter of cases to human review cut the critical error rate by ~61% vs. full autonomy. This means that "human oversight" stops being a checkbox and becomes a measurable dial, a threshold vs. workload vs. residual risk. https://arxiv.org/pdf/2606.19812