Agentic AI in systems of public record demands a threat model built for autonomous action, not just autonomous output. This paper sets out four governing principles, an autonomy ladder that scopes what an agent may do without human sign-off, and the control-plane architecture that makes governance the accelerant of safe agentic deployment rather than its brake. Part of the Sovereign Digital Resilience series.