Agents are users and programs; every OS assumes those are disjoint.

Pentad's PLRN/030 starts from an assumption every operating system makes: users and programs are different kinds of thing. An AI agent is both, code that needs its resources managed and an actor that makes its own decisions, so existing protection models cannot govern it without giving up accountability. The paper's answer is an OS that binds authority to a task rather than to a principal, holds that authority outside the agent's control, and lets operators revoke it across a fleet of agents. The platform page describes Pentad's product.