1 min lesson
Layer 5 - the control plane
Answer "Why is it wrong to describe Layer 5 as just another flow layer that Cursor speeds up?" Use one lesson detail to support it.
Step 1 of 2
Layer 5 - the control planespans all four; you respect it, you never bypass it
Layer 5 isn't a flow layer. It's the set of controls cutting across the other four to satisfy regulators and auditors:
- separation of dutiesNo single person can author, approve and deploy the same change. The core control AI autonomy has to respect. Press Enter for the full definition. (the author can't also approve and deploy)
- ITGCIT General Controls. The baseline IT controls auditors check: who can change what, how changes get approved and how systems are run. Press Enter for the full definition. (access, change and operations controls)
- an audit trail
- access control
- data residency
In a SOXSarbanes-Oxley Act. A US law that forces companies to keep auditable controls over any system that affects their financial reporting. Press Enter for the full definition.-relevant shop these aren't optional and they aren't yours to redesign.
The cardinal sin is implying Cursor lets a developer skip a control to go faster, e.g. 'the agent can just deploy straight to prod.'
That one sentence ends enterprise deals. Autonomy inside Layer 2 is welcome. Autonomy that crosses a Layer 5 boundary (author = approver = deployer) is a separation of dutiesNo single person can author, approve and deploy the same change. The core control AI autonomy has to respect. Press Enter for the full definition. violation an auditor will flag.
Cursor makes Layer 5 cheaper to satisfy with better evidence, AI-code tracking and audit logs. It never removes the control.