Ch. 7 — The Five Principles

Every framework covered in this book agrees on five things. The words differ. The obligations do not.

Part 1 examined compliance through the lens of business concerns: risk classification, transparency, data rights, audit, vendor governance. Part 2 examines those same concerns through engineering decisions. Before crossing that boundary, name what both sides share.

These five principles are not a summary of Part 1. They are the spine of it. If you understand these five things, you understand most of what the regulations are trying to accomplish. If your agent systems embody these five things, you are most of the way to compliant.