# A proposed roadmap for RiskMandate: what changed in v1.1.0, sgit.ai > The changes to the article "A proposed roadmap for RiskMandate" in v1.1.0, paragraph by paragraph. *Source: · sgit.ai v0.7.87 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a `.md` twin; internal links below point at them.* --- [Home](../../../index.md) / [Articles](../../index.md) / [A proposed roadmap for RiskMandate](../../the-riskmandate-roadmap.md) / [Versions](../the-riskmandate-roadmap.md) / v1.1.0 # A proposed roadmap for RiskMandate: what changed in v1.1.0 From v1.0.0 (2026-10-20, `b196a772e`) to v1.1.0 (2026-10-20, `3a760bc1c`), paragraph by paragraph. 0 paragraphs added, 0 removed, 8 changed in place, 29 unchanged. About 27 words added and 8 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names. [all versions](../the-riskmandate-roadmap.md) · [v1.2.0 →](v1.2.0.md) # The RiskMandate roadmap: policies, understand, contain, manage, accelerate, then insurance, and a foundationhometo governfor the Agent Behaviour Policy outside RiskMandate Summary: This is a proposed roadmap for RiskMandate, and two decisions. The first is about governance. On 8 October RiskMandate's two founders decided to propose the Agent Behaviour Policy to OWASP as an open project, because a description of what an agent can do should not belong to the company that sells it. It was not the right fit for an OWASP hasproject,saidsono.theSo wepolicy will setmoveupto the Open Security Summit instead, as a foundationhostedfor it instead:project: the point is the same, that the policy is governed outside the RiskMandate organisation, which today is mostly The Cyber Boardroom. The second is the roadmap: five stages of development, then insurance. Policies, then understand, then contain, then manage, then accelerate, and then insurance. We are in the first stage: creating the policies and the flows, with our first customers, whose programme is now running at customers.riskmandate.ai. The later stages we will start as they are needed, as we get more customers and users and the offering matures. This is the plan; the stages after the first are a first reading, to be refined with the people using it. 2 unchanged paragraphs, under In short {#in-short} • **OWASP**Thehaspolicysaid no to the project.** So the Agent Behaviour Policy getsneeds a foundationhomeinstead.outside RiskMandate.** Governed by more people than us. • **The**Itfoundationwillisbeabouthostedgovernance.** The policy is governed outsideby the RiskMandateOpenorganisation.Security Summit.** OWASP was not the right fit. 5 unchanged paragraphs ## A foundation,homenowoutsidethat OWASP has said noRiskMandate {#foundation} 1 unchanged paragraph OWASPIthaswassaid no tonot the right fit for an OWASP project. The reason for proposing it has not changed, so we are going to setgiveupitaanotherfoundationhome:fortheit.[Open Security Summit](../../agent-behaviour-policies-move-to-the-open-security-summit.md), as its first hosted project. What that means, fundamentally, is that we want the governance of the Agent Behaviour Policy to happen outside the RiskMandate organisation, which at the moment is predominantly [The Cyber Boardroom](https://thecyberboardroom.com/). The vocabulary, the schema and the published policies are already open, under CC BY 4.0 and Apache 2.0, at [abp.sgit.ai](https://abp.sgit.ai/); the foundationnew home is where decisions about them will be made, by people who are not only us. 16 unchanged paragraphs, under Five stages, then insurance {#roadmap}, Where we are: the policies {#now}, The later stages, as they are needed {#later}… • **The foundationhosting is aproposed.** decision,Thenotcharteranandentity.**theItsteeringdoesgroupnotcomeexist yet.first. • **OWASP has not endorsed anything.** ItThesaidprojectnowastonottheaproject.fit for it. 5 unchanged paragraphs, under Where this comes from {#sources} [all versions](../the-riskmandate-roadmap.md) · [v1.2.0 →](v1.2.0.md) --- *[Site index for agents](../../../llms.txt) · [HTML version](https://newsroom.sgit.ai/articles/versions/the-riskmandate-roadmap/v1.1.0.html)*