Hunter Storm Logo - Black and Gold Trademark Symbol. This image embodies Hunter Storm Store, Hunter Storm digital experience optimization, and all of her endeavors.

Ideal: People should retain meaningful control over accounts, subscriptions, services, data, and digital identities.

Focus: Account ownership, customer control, cancellation rights, consent, governance, access rights, and user authority.

Central Question: Can a person understand their situation, make an informed decision, and meaningfully act?
Establishes human agency as the ability to perceive, evaluate, choose, refuse, intervene, and recover control—not merely the presence of a human in the process.

Connects to: Human-Centered Security, Human Escalation Paths, Identity.

 

Human Agency

 

Research Hub

Human agency is the ability to understand one’s circumstances, make meaningful decisions, act on those decisions, challenge consequential actions, and retain the practical ability to exercise control over one’s own affairs.

In increasingly automated and interconnected systems, agency depends on more than having a nominal choice, an active account, or access to a support channel. It depends on whether a person can obtain meaningful information, understand the state of the systems affecting them, preserve their options, contest decisions, and recover when those systems fail.

Operational resilience must account for the human being who depends on the system—not merely the system’s continued operation.

This research examines the conditions under which people retain or lose meaningful agency when technology, institutions, automated processes, security controls, and human decision-makers interact.

 

The Problem | Formal Control Versus Actual Agency

A system may be functioning according to its current configuration while failing the person who depends on it. An account may remain visible while essential capabilities disappear. A service may be unavailable without a clear explanation. An automated decision may change a person’s status, while the available support process provides no effective way to challenge or reverse it.

These situations expose a distinction between formal control and operational agency.

Formal control is the authority, permission, or theoretical ability to perform an action. Operational agency is the practical ability to understand the situation, make an informed choice, and carry that choice into effect.

The distinction matters when:

  • A person loses access to an essential service and cannot establish why.
  • Automated systems make consequential decisions without meaningful explanation or effective appeal.
  • Records are incomplete, inconsistent, or unreliable, preventing a person from reconstructing what happened.
  • Support and escalation channels exist but cannot investigate, authorize corrective action, or restore the previous state.
  • Essential functions depend on systems, identities, devices, or intermediaries outside the person’s control.
  • Attempts to resolve one problem create additional dependencies, risks, or losses of control.

A nominal right to appeal is not equivalent to an effective appeal. A documented procedure is not equivalent to an operationally capable escalation path. An available recovery option is not equivalent to a recovery process that works.

Human agency therefore has to be evaluated in practice.

 

Research Questions

This research examines several interconnected questions:

Understanding and observability

Can a person determine what state a system is in, what has changed, which capabilities remain available, and what information is needed to make a meaningful decision?

 

Decision-making and consent

Can a person make an informed choice? Are consequential actions understandable? Can consent be withheld or withdrawn where appropriate, and can a person refuse an action without losing unrelated, essential capabilities?

 

Control and intervention

Can a person stop, challenge, correct, or escalate a consequential action? Does the person have a practical means of intervention, or does control exist only in policy documents and interface design?

Evidence and accountability

Can the person preserve evidence of what occurred? Are the relevant records sufficiently reliable to support reconstruction, investigation, and attribution? Can someone with the necessary authority act on the evidence?

 

Continuity and recovery

When a system fails or access is removed, can the person retain essential functions, establish their legitimate identity, reach an effective human escalation path, and recover a trustworthy operating state?

 

Institutional responsibility

When a failure crosses organizational boundaries, does any party retain sufficient responsibility and capability to resolve it? Or can each participant point to another system, department, provider, or automated process while the person remains unable to act?

These questions treat agency as an operational property that can be impaired by technical architecture, process design, institutional behavior, and failures of accountability.

 

Agency Under Conditions of Failure

Human agency is easiest to recognize when systems behave as expected. Its importance becomes more apparent when they do not.

Real-world operational failures can expose gaps between what an organization claims its systems can do and what a person can actually accomplish when something goes wrong. Service disruptions, unexplained changes in system state, unreliable records, automated flags, access restrictions, and ineffective escalation mechanisms may have different immediate causes. Their consequences can nevertheless converge: the affected person loses the information, access, authority, or practical options needed to resolve the situation.

Investigating these conditions requires distinguishing what is documented from what remains unknown.

A failure may be established even when its initiating mechanism is not. A record may be demonstrably inconsistent without establishing who changed it or why. A person may be unable to obtain a remedy without that outcome, by itself, proving deliberate interference.

These distinctions are essential to credible research. They preserve the seriousness of observed failures without substituting assumptions for evidence.

The central concern is not limited to determining whether a particular action was intentional. It is also determining why the system permitted the failure, why existing controls did not prevent or adequately detect it, why the available evidence was insufficient, and why the affected person could not effectively intervene or recover.

 

Engineering for Human Agency

Human agency should be considered throughout system design, implementation, operation, incident response, and recovery.

Relevant engineering and governance practices include:

  • Meaningful transparency: Provide actionable explanations of consequential state changes, decisions, restrictions, and failures.
  • Reliable evidence: Preserve records with appropriate integrity protections, timestamps, provenance, access controls, and retention practices.
  • Effective challenge and escalation: Provide routes to qualified people who possess the authority and technical capability to investigate and correct failures.
  • Proportionate controls: Consider the effects of security restrictions and automated decisions on legitimate users, including the consequences of false positives and erroneous state changes.
  • Independent verification: Avoid relying exclusively on the same system or record source to establish both what happened and whether its own behavior was correct.
  • Recoverability: Design and test practical ways to restore legitimate access and essential functions without depending entirely on the failed mechanism.
  • Dependency awareness: Identify single points of failure across devices, accounts, identity providers, communications channels, and support processes.
  • Accountability: Establish who is responsible for investigation, corrective action, validation, and communication when failures cross technical or organizational boundaries.

 

These practices are not a guarantee that failures will never occur. Their purpose is to reduce preventable harm, improve the quality of evidence, preserve meaningful options, and make effective intervention and recovery possible.

Their implementation must also be evaluated against actual operating conditions. A control that exists on paper but cannot be invoked when needed does not provide the same protection as a control that has been tested and shown to work.

 

Documentation, Provenance, and Information Resilience

Agency can be diminished when the affected person cannot preserve an accurate account of events or establish the provenance of relevant information.

Documentation is therefore more than an administrative activity. It can preserve chronology, distinguish original records from later interpretations, connect related events, identify inconsistencies, and support independent examination.

Hunter Storm’s related work on defensive documentation, provenance, and information resilience addresses this problem. The Stop Hitting Yourself Protocol™ expresses a defensive principle: preserve and strengthen the evidentiary record rather than respond to interference with retaliation. The Hunter Storm Records Management System™ (HSRMS) provides a records-management implementation context for organizing artifacts and maintaining their relationships.

These concepts are related but distinct. Documentation supports the evidence base; provenance helps establish the origin and history of information; records management supports organization and retrieval; information resilience concerns the continued integrity, context, and availability of information when systems or circumstances change.

Together, these capabilities can help preserve the ability to understand and respond to events even when the original operating environment is unreliable.

Documentation alone cannot guarantee attribution, compel an institution to act, or establish that an unexplained event was deliberate. Its value is that it preserves material for examination and reduces dependence on an undocumented recollection or a single source of information.

 

Relationship to Operational Resilience

Human agency is connected to every other area of this Operational Resilience research hub, but it is not interchangeable with any of them.

  • Human-Centered Security examines how security design and controls affect people, including whether protections themselves create avoidable harm.
  • Human Escalation Paths examines whether people can reach someone capable of investigating, explaining, and correcting a failure.
  • Identity Continuity examines the preservation of legitimate identity, recognition, and access across disruption.
  • Invisible Failure Analysis examines how to identify and reconstruct failures that are not adequately represented in visible system behavior or available records.
  • Recoverability Engineering examines the practical restoration and verification of a trustworthy operating state.
  • Single-Device Dependency examines how reliance on one device or access path can constrain a person’s options when that dependency fails.

 

Human agency provides a human-outcome perspective across these domains. It asks whether the combined system of technology, process, evidence, and institutional responsibility leaves a person able to understand, decide, act, challenge, and recover.

 

Research and Publications

This sub-hub is the publication home for research concerning human agency under real-world operational conditions.

The associated papers examine documented experiences, observed failure modes, technical and institutional dependencies, evidentiary limitations, and the broader engineering implications of losing or preserving meaningful control. They may draw on established standards and authoritative research where those sources help explain a mechanism, evaluate a control, or compare actual practice with an established benchmark.

The research is not limited to whether a system is available or whether a policy exists. It examines whether the mechanisms intended to protect, support, and serve people remain effective when tested by failure.

Associated papers and related research artifacts will be listed here and connected to relevant work elsewhere in the Operational Resilience collection.

 

Governing Question

When the systems on which a person depends fail, change state, or make consequential decisions, what preserves that person’s ability to understand what happened, exercise meaningful control, challenge the outcome, and recover?

Human agency is not demonstrated by the mere existence of permissions, policies, interfaces, or appeal procedures. It is demonstrated by what a person can meaningfully do under actual operating conditions.

 

Related Operational Resilience Resources

 

Discover More from Hunter Storm