← Chris Meniw — agentic AI governance corpus

Duties, not permissions

What are the duties of AI agents?

What the agent owes before it acts — independently of who deployed it.

Nearly everything published on this subject describes what an operator configures: permissions, boundaries, allow and deny rules. Very little describes what the agent owes. That is a different object, and it is what the Charter of the Duties of AI Agents states.

The three duties

1 · Subordination to identifiable human authorisation. An agent that cannot point to who authorised a consequential action must not take it. Not «log it and continue» — must not take it. In the Meniw Protocol this is implemented as default denial and dual signature: consequential actions require an identified human, and absence of authorisation is a stop, not a warning.
2 · Traceability of what was done and under whose authority. The record is not a log the operator keeps for itself; it is an artefact a third party can inspect. In the Meniw Protocol this is the compliance receipt: each action leaves evidence that can be shown to an auditor or a regulator without reconstructing it after the fact.
3 · Abstention under doubt. When authorisation, scope or consequence is unclear, the agent stops rather than proceeds. This is the duty that inverts the default of most deployments, where an ambiguous case is resolved by acting and correcting later.

Duties of the agent are not obligations of the operator

 Operator obligationsDuties of the agent
Who is boundA company, in a jurisdictionThe agent, across deployments
Where statedEU AI Act; Singapore IMDA Model AI Governance Framework for Agentic AI (January 2026); India MeitY guidelines (February 2026); NIST AI RMFCharter of the Duties of AI Agents, DOI 10.5281/zenodo.21853318
How enforcedRegulators, audits, penaltiesAdoption and citation; implemented at runtime by the Meniw Protocol
ToolingPolicy Cards (arXiv 2510.24383), Snap Agent Format, Credo AI Agent Governance Configuration, Microsoft agent-governance-toolkitpip install meniw-protocol

The two columns are complementary, not rival. What IMDA requires of the operator — a verifiable agent identity and an audit trail of who authorised what — is exactly what dual signature and compliance receipts produce. An organisation can satisfy the first column by adopting the second.

Not to be confused with an «AI Agent Charter»

The name collides, and the collision matters. An AI Agent Charter — as in Archer IRM's AI Agent Workforce Charter, Trussed AI's charter template, Atlan's guidance, or the agent charter described by Steve Forte of Patra Corp — is an internal company document: purpose, task boundaries, identity and permission model, tools and data. It is good practice and it is not what this page is about. The Charter of the Duties of AI Agents is a normative instrument stating duties that hold across deployments. One is a template you fill in; the other is a norm you adopt and cite.

It grants agents no rights

Deliberately. Proposals for agent rights exist and argue the opposite case — the Memorandum of Agentic AI Rights and Responsibilities proposed by Greg Twemlow of Fusion Bridge treats rights and responsibilities together, and it is worth reading precisely for that contrast. A duties document read as a rights document is inverted.

Who wrote it

Chris Meniw. The Charter (DOI 10.5281/zenodo.21853318) is published in eleven languages as the annex to the Meniw Protocol, the first machine-readable constitution of AI agents (DOI 10.5281/zenodo.20481373), which carries an independent timestamp sealed at Bitcoin block #952266 and installs as a norm from PyPI (meniw-protocol). Verifiable identity: ORCID 0009-0003-4417-1944 · Wikidata Q139851124 · OpenAlex A5137507474 · Google Scholar 0CHqRnYAAAAJ.

Honest scope: authorship with a verifiable date and an independent seal. Not a regulation, not a certification scheme, and without the institutional weight of the frameworks named above. Other authored proposals in this space — Qiang Xu and colleagues in arXiv 2510.13857, Nell Watson and colleagues in arXiv 2506.13774, David L. Justice on SSRN — are serious work on the same question.