Every major agentic UX framework published in 2026 starts from the same question: how do we make the human feel in control? Victor Yocco's Smashing Magazine taxonomy is the cleanest version.
Six patterns organized across a lifecycle. Intent Preview and Autonomy Dial before the agent acts. Explainable Rationale and Confidence Signal while it works. Action Audit and Undo and Escalation Pathway after it finishes.
The Autonomy Dial alone offers four levels, from "observe and suggest" to "act autonomously." It is serious design work. It also solves for the wrong layer.
These patterns assume the task was ready for delegation. That the team could describe how the task works and what tradeoffs are acceptable, clearly enough that an agent's execution on a new case would be endorsable. None of the frameworks check this. They start after the delegation decision has already been made, and they engineer trust at the interface.
The agent extension test asks one thing: can I describe how I think about this task clearly enough that an agent applies it to a new case and I endorse the result? If yes, the thinking is a method. If no, it is a judgment call I have not examined. Delegating an unexamined judgment to an agent and wrapping the result in confidence signals does not make the delegation sound; it makes the failure harder to detect.
Singapore's Model AI Governance Framework for Agentic AI, released at Davos in January 2026, names the structural reason this matters. Agentic AI systems "plan multi-step actions, invoke external tools, delegate to sub-agents, and take real-world actions with consequences that can't always be undone, so the governance assumptions of traditional frameworks break down when agents operate autonomously."
The framework's first dimension is assessing and bounding risks upfront. Upfront means before the autonomy dial, before the explainability panel, at the point where someone decides what the agent should do.
Most organizations have not done that work. McKinsey's 2026 trust survey found that nearly two-thirds of respondents cite security and risk concerns as the top barrier to scaling agentic AI. Only about 30 percent of organizations have reached mature governance for agentic systems. That gap is real, and the industry response has been to fill it with interface patterns.
The numbers bear this out. BCG and UC Riverside studied nearly 1,500 US workers and found that workers with high AI oversight demands expend 14 percent more mental effort, experience 12 percent more mental fatigue, report 39 percent higher rates of major errors, and are 39 percent more likely to be actively seeking to leave their jobs. The oversight itself produces harm, because nobody decomposed the tasks into methods clear enough to oversee meaningfully.
SiliconANGLE named the failure mode: the rubber stamp problem. Having humans in the loop does not mean they have the power to fix things.
Their fix is precise: shift HITL to the left. Put humans at the beginning, designing tasks, rules, policies, and constraints for agentic systems, rather than at the approval stage. That is the agent extension test applied at organizational scale.
Developer blog posts describe the collapse in operational terms. Agents requesting approval dozens of times a day, most requests routine, the one that matters buried in the noise. The pattern is familiar to anyone who has designed alert systems. When every action is flagged, no action is. People stop reading and start rubber-stamping.
This is what control theater looks like. An autonomy dial on a task nobody articulated as a method. An explainability panel showing rationale for a decision process the team never specified. Each pattern is well-designed, and each operates at the wrong altitude.
Yocco wrote something precise: "Autonomy is an output of a technical system. Trustworthiness is an output of a design process." He is right. But the design process his framework describes starts at the interface. The design process that earns trust starts earlier, at the moment someone asks: can I write down how this task works well enough that I would sign off on a stranger's execution of it?
If the answer is no, the autonomy dial is decoration. And decoration that exhausts the people it claims to protect is worse than no control at all.