Shared
Agents reused across teams.
One useful agent becomes four. It spreads from the team that built it into marketing, sales, support, and finance. People copy prompts and tokens; everyone has a slightly different version.
Agents are now organisational tools, but ownership is diffuse and identity is borrowed from whoever set them up.
Fragmented ownership and inconsistent standards. No single team is accountable for any given agent.
Assign named owners. Move agents off personal tokens and onto scoped, revocable identities.
The six control surfaces
What the controls look like at this stage
Maturity is measured across six control surfaces. Here is where a immature organisation — one sitting at Stage 02 — typically stands on each.
Inventory
ImmatureNo list. Nobody can say which agents exist, what they touch, or where they run.
Ownership
ImmaturePersonal accounts. No named human is accountable for any agent’s behaviour.
Runtime visibility
ImmatureNone. What an agent does between input and output is invisible.
Access control
ImmaturePersonal tokens with broad scopes. Agent identity is indistinguishable from a user’s.
Evaluations
ImmatureNone, or a single check before launch that is never repeated.
Governance
ImmatureNo policy, no audit path, no way to stop an agent cleanly.
The move that matters
Advancing to Stage 03 — Operational
You do not skip stages. You close the gap in front of you, and only one control matters most right now.
Assign named owners. Move agents off personal tokens and onto scoped, revocable identities.
Stage 02 — Shared, answered.
Short answers for teams placing themselves at the Shared stage of the agent operational maturity curve.
What is Stage 02 (Shared) of the agent maturity model?
One useful agent becomes four. It spreads from the team that built it into marketing, sales, support, and finance. People copy prompts and tokens; everyone has a slightly different version. In short: agents reused across teams.
What is the main risk at the Shared stage?
Fragmented ownership and inconsistent standards. No single team is accountable for any given agent.
How do you move beyond the Shared stage?
Assign named owners. Move agents off personal tokens and onto scoped, revocable identities. That is what takes an organisation from Stage 02 (Shared) to Stage 03 (Operational).