Decision Infrastructure ยท Referenced framework
Forrester's AEGIS Framework
A security analyst firm and an ERP execution layer arrived at the same boundary from two different directions, without comparing notes. One calls it "least agency." The other calls it Approve.
Attribution
AEGIS is Forrester's framework, not IQ's. Read the primary source: forrester.com/technology/aegis-framework.
Forrester built AEGIS to extend Zero Trust security into agentic AI. Its core control is "least agency": constrain not just what an agent can access, but what decisions it's allowed to make on its own. AEGIS also names a three-way enforcement mechanism, dynamic rules that can "automatically pause activity, escalate alerts, or route for human approval," as the way that constraint gets applied in practice.
IQ's own five-layer model, Signal, Route, Approve, Execute, Audit, was built independently, for a different problem: getting an ERP-connected decision executed with a named owner and a permanent record, not securing an agent's access scope. The overlap is real but narrow. AEGIS's "least agency" is the access/decision-authority split IQ's Approve layer already enforces. AEGIS's pause/escalate/route language names the same three moves IQ's Route and Approve layers carry out inside Business Central. Neither framework depends on the other. They converge on the same shape because the underlying problem, an agent with more reach than judgment, is the same problem from a security angle and an operations angle.
Does Forrester's AEGIS framework replace IQ's five-layer decision infrastructure model?
No. AEGIS is a security framework: it defines what an AI agent should be allowed to access and decide, and describes controls like pausing activity or routing for approval. Decision infrastructure is the operational layer that runs those controls inside a system of record: a named owner, a value threshold, a write to Business Central, a permanent record. AEGIS and IQ's Route and Approve layers describe the same boundary from different disciplines. Neither one implements the other.