The recommended operating model combines (a) a management-system backbone that supports continual improvement (Plan–Do–Check–Act), commonly used in mature governance programs (e.g., data/IT governance); and (b) an open, transparent contribution workflow inspired by well-run open-source projects (clear roles, predictable decision paths, and versioning discipline). 

Roles and Decision Rights 

The governance approach uses seven core roles: the accountable owner, the evaluation lead, the security lead, the transparency lead, the responsible agentic AI lead, the contributor, and the independent reviewer (if needed). Some roles may be combined initially, but separation is the goal as we mature in this framework.