SectionGuidance
Agentic controls: Development
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
Supply chain security for data, models, agents, software libraries, developer tools, MCP server packages, firmware and hardware; controls mapped to OWASP agentic threats such as memory poisoning and rogue agents.
What this connects to
1 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Maps across to1
- External frameworkFunction: MANAGEGuidanceGAGE analysis, not official
Agentic supply-chain controls are MANAGE treatments
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.