This design assumes a centralised security operating model where identity is the primary control plane and all AI actions are continuously verified and governed. It enforces strict isolation and response discipline to minimise blast radius and ensure recoverability across environments on AWS. Consumption is tightly controlled with least-privilege access and policy enforcement as default operating assumptions. Execution is anchored through AWS IAM Identity Center and AWS CloudWatch to maintain identity integrity and continuous security visibility.