Why AI Agents Need Institutions, Not Just Capabilities

Making an agent capable — able to call tools and complete tasks — is necessary but not sufficient. To act in the world with others, an agent needs an institution around it: a durable identity, authority it can prove, a policy that bounds it, a record of what it did, and a human who answers for it. Capability lets an agent do something; institutional infrastructure lets a stranger trust and verify what it did.

Capability

Can the agent do the thing?

Institution

Can a stranger trust and verify it?

Needs

Identity, authority, policy, record, a human

Successor

The AAO — the machine institution

From capable to accountable

The agentic web settled the capability layer first. The layer left empty is accountability: who authorised this, who is responsible, what can be proven. An agent with capability but no institution is powerful and untrustable — a stranger has no way to know who stands behind it. The AAO is the pattern that supplies the institution, so autonomous action can be trusted at the scale capability makes possible.

Questions

Why aren’t capabilities enough?

Because a capable agent a stranger cannot identify, whose authority they cannot verify and whose actions leave no record is powerful but untrustable. Institutions supply the trust and accountability capability alone cannot.

What is the institution for an agent?

The AAO — durable identity, provable authority, a policy plane, an auditable record, and a named accountable human.