GOV-01 · Design Agent objectives scope and prohibited actions Agent Strategy Scope and Accountability
GOV-02 · Pilot Agent inventory risk tier and materiality map Agent Strategy Scope and Accountability
GOV-03 · Operate Delegated authority charter and accountability Agent Strategy Scope and Accountability
GOV-04 · Improve Insurance law policy and obligation mapping Agent Strategy Scope and Accountability
IAM-01 · Design Nonhuman identity credential and ownership control Identity Access and Tool Governance
IAM-02 · Pilot Least privilege tool registry and allowlist Identity Access and Tool Governance
IAM-03 · Operate Data permission tenant and record boundary Identity Access and Tool Governance
IAM-04 · Improve Separation of duties and privilege escalation Identity Access and Tool Governance
ORC-01 · Design Instruction hierarchy policy and version control Instructions Planning Memory and Orchestration
ORC-02 · Pilot Planning retry time cost and resource limits Instructions Planning Memory and Orchestration
ORC-03 · Operate Agent handoff and multiagent orchestration Instructions Planning Memory and Orchestration
ORC-04 · Improve Memory provenance minimization and lifecycle Instructions Planning Memory and Orchestration
AUT-01 · Design Action taxonomy and delegated authority matrix Action Authority Human Approval and Rollback
AUT-02 · Pilot Human approval gates and decision thresholds Action Authority Human Approval and Rollback
AUT-03 · Operate Transaction velocity and cumulative limits Action Authority Human Approval and Rollback
AUT-04 · Improve Reversibility rollback reconciliation and safe failure Action Authority Human Approval and Rollback
SEC-01 · Design Prompt injection goal hijack and instruction defense Security and Adversarial Resilience
SEC-02 · Pilot Tool input output and code execution safety Security and Adversarial Resilience
SEC-03 · Operate Agent tool model and protocol supply chain Security and Adversarial Resilience
SEC-04 · Improve Secrets exfiltration sandbox and network control Security and Adversarial Resilience
INS-01 · Design Claims underwriting policy and payment authority Insurance Workflow Customer and Market Safeguards
INS-02 · Pilot Customer producer regulator and vendor communications Insurance Workflow Customer and Market Safeguards
INS-03 · Operate Fairness explanation accommodation and recourse Insurance Workflow Customer and Market Safeguards
INS-04 · Improve System of record write and reconciliation control Insurance Workflow Customer and Market Safeguards
OPS-01 · Design End to end trace logging and evidence retention Monitoring Incident Response and Continuity
OPS-02 · Pilot Behavior anomaly drift and limit monitoring Monitoring Incident Response and Continuity
OPS-03 · Operate Kill switch containment investigation and recovery Monitoring Incident Response and Continuity
OPS-04 · Improve Fallback service continuity and manual operations Monitoring Incident Response and Continuity
ASS-01 · Design Scenario evaluation red teaming and abuse testing Evaluation Assurance Change and Improvement
ASS-02 · Pilot Authorization boundary and approval bypass testing Evaluation Assurance Change and Improvement
ASS-03 · Operate Change release canary and regression control Evaluation Assurance Change and Improvement
ASS-04 · Improve Outcome value residual risk and retirement review Evaluation Assurance Change and Improvement