Our piece on ITU’s new Focus Group on Trust and Identity for Agentic AI drew a comment worth sitting with. Greggory Don Butler pointed out that identity and trust solve only half the problem. An agent can hold valid credentials, the right access, and clearly defined authority, and still act on stale evidence, broken data continuity, or a dependency that changed in the seconds between its decision and its execution. Identity asks which agent is acting. Trust asks whether it should be recognized. Neither one asks whether this specific action, right now, has earned the right to bind to building reality.
That is a sharp distinction, and it turns out this publication has already been circling it from a different angle.
Two Different Questions
BACnet Secure Connect answers a real question: is this device who it claims to be. ITU’s Focus Group is trying to answer the same question for AI agents at a global scale, extending certificate-based trust into agent identity and interoperability. Both are necessary. Neither answers a separate, later question: given everything that could have changed since this agent last checked reality, should this action execute right now.
An agent can pass every identity and authorization check and still be reasoning from a sensor value that is forty seconds stale, a dependency that shifted mid-decision, or a snapshot of the building that no longer matches the building. That is not an identity failure. It is an admissibility failure, and it happens after trust has already been granted.
This Site Has Already Been Asking This
Contributing editor Greggory Don Butler has spent recent months building out exactly this argument under the banner of Admissible Execution Architecture. His piece “Buildings Are Becoming Intelligent Before They Are Admissible” argues that a building does not need to become self-aware to become dangerous, it only needs to start acting on conditions it cannot prove, and proposes a governed chain running Reality, Record, Continuity, Admissibility, Binding, Commit, Execution, Outcome. His follow-up, “The Governance Exchange Has Arrived,” extends that into a working structure, the TA-14 framework, built around one governing principle: no admissible evidence, no admissible execution.
Buildings Are Becoming Intelligent Before They Are Admissible
The Governance Exchange Has Arrived
Read against the LinkedIn comment, the resonance is hard to miss. Both are describing the same gap: a system can be fully authorized to act and still lack proof that the moment it is acting into is the moment it thinks it is acting into. Butler’s framing comes from the building side, evidence, continuity, atmospheric truth. The comment came from the AI architecture side, identity, trust, execution. They are converging on the same missing layer from two different starting points, which is usually a sign that a real gap has been found rather than invented.
Other Industries Are Already Building This Layer
This is not hypothetical elsewhere. Two examples are worth knowing.
In financial and infrastructure automation, an architecture pattern called the Decision Intelligence Runtime has emerged specifically to solve this problem. Writing in O’Reilly Radar, engineer Artur Huk describes agent failures that have nothing to do with reasoning quality: a race condition where the market moves in the gap between decision and execution, a dropped connection that leaves an agent looping on stale state, a duplicate transaction fired by a retry against a world that has already changed. His answer borrows the same separation operating systems use between user space and kernel space. The agent proposes an action as a claim, not a fact, and a deterministic runtime layer checks that claim against a fresh snapshot of reality immediately before execution, using what Huk calls a drift envelope, a configurable tolerance for how much the world is allowed to have changed before the action is aborted rather than executed. The article notes explicitly that the same structure applies to industrial control systems, not just trading desks.
The Missing Layer in Agentic AI, O’Reilly Radar
Telecommunications is further along on the regulatory side. As telecom networks move toward fully autonomous operation, Ericsson has proposed a Guard Rail Validation framework that intercepts every AI-generated network decision and scores it for criticality before allowing execution, applying graduated checks ranging from simple logging up to independent multi-agent consensus depending on how consequential and reversible the action is. Ericsson’s broader agentic AI work also describes testing proposed actions inside a network digital twin before they ever reach production, and its runtime conformance logging is built with an eye toward Article 14 of the EU AI Act, which requires human oversight of high-risk automated systems.
Criticality-Based Guard Rail Validation for AI Agent Decisions in Autonomous Telecom Networks
Adapting Agentic AI for Autonomous Telecom Networks, Ericsson
Neither of these industries is talking about building automation. Both are independently arriving at the same conclusion the comment raised: authenticated does not mean current, and current has to be checked separately, immediately before the action lands.
What This Could Look Like in a Building
Building automation already has a primitive version of this instinct. Interlocks, permissives, and staged startup sequences exist precisely because a command being authorized is not the same as a command being safe to execute right now. A supply fan will not start until proof of airflow, damper position, and safety interlocks confirm the actual state of the system, not the state it was in ten seconds ago.
Agentic AI raises the stakes on that same problem. An agent with full BACnet/SC credentials adjusting airflow, pressure, or setpoints based on a sensor reading is only as good as how recently that reading was taken and how much has changed since. A drift envelope, in Huk’s terms, or an admissibility check, in Butler’s, would mean the system re-verifies the specific condition that justified the action immediately before committing it, and refuses or escalates if too much has moved. That is a small, concrete, buildable idea sitting underneath a much larger architectural conversation.
Identity Is the Beginning, Not the Ending
ITU’s Focus Group and BACnet/SC solve a real and necessary problem. They do not solve this one. The industry now has, in the space of a few months, an external standards body opening the identity question, an internal contributing editor building out a full admissibility architecture, and independent technical precedent from finance and telecom showing the same gap being closed with concrete engineering, drift envelopes, idempotency keys, criticality-scored guard rails, and digital twin sandboxes.
ssThat is three different lenses converging on one point: verifying who is acting is necessary, but it is not the same question as verifying whether this exact action should be allowed to happen now. The next standards conversation, in building automation and everywhere else agentic AI touches physical consequence, is going to have to be about that second question.
More From AutomatedBuildings.com
Before the Building Acts — Greggory Don Butler on why fragmented operational memory, trend logs, work orders, commissioning reports, sitting in separate systems, is not the same as a governed environmental record
The Future of Commissioning: From Clipboard Verification to Hybrid Leadership — why commissioning increasingly means verifying the handoffs between disciplines, not just testing equipment
ThrowBack Thursday, a Brief History of Digital Twin Discourse (1999-2026) — how this site’s own thinking on digital twins evolved from construction handover tool to something closer to a governance layer
The BACnet/MSI Semantic Gap: Why Independent Integrators Hold the Key to Unlocking Agentic Buildings — the integration-layer half of the agentic AI readiness problem
Sources and Further Reading
ITU launches global standards initiative to build trust in AI behaviour and identity — ITU, July 9, 2026
Buildings Are Becoming Intelligent Before They Are Admissible — Greggory Don Butler, AutomatedBuildings.com, May 10, 2026
The Governance Exchange Has Arrived — Greggory Don Butler, AutomatedBuildings.com, July 19, 2026
The Missing Layer in Agentic AI — Artur Huk, O’Reilly Radar, March 26, 2026
Criticality-Based Guard Rail Validation for AI Agent Decisions in Autonomous Telecom Networks — Ravi Kant Sharma, EricssAdapting Agentic AI for Autonomous Telecom Networks — Ericsson white paper
