Which agents fall under the rules, what you can evidence for each of them, and how much reach they hold that they have never used.
The compliance score is not a judgement. It is the share of controls we can put evidence behind, taken from the declared boundary, the tier each agent connects on, and what it has actually called. Agents are ordered worst first, which is the work order.
Owner: S. Iyer
Minimal risk. Internal or public data only, with no path to personal records.
No specific obligations beyond the estate's own policy.
S. Iyer, Network Engineering lead.
Documentation only. Cannot touch network elements, tickets or customer data.
1 action gated through the approval queue.
Tier 1: every call and tool invocation is recorded.
98.4% success rate, above the estate's 96% bar.
Last reviewed Jun 2026.
Measured, not asserted: every grant is checked against the tool calls this agent has actually made. Reach it never exercises is blast radius carried for free.
Every grant on this agent is exercised. No reach carried for free.
Owner: R. Mehta
High risk. It can write to systems holding personal data. A wrong write is a privacy incident, not a bug.
Human oversight, logging, accuracy and record-keeping are mandatory, not optional.
R. Mehta, NOC operations manager.
Change requests and incident state in ServiceNow. Cannot execute network changes itself.
2 actions gated through the approval queue.
Tier 1: every call and tool invocation is recorded.
97.1% success rate, above the estate's 96% bar.
Last reviewed Jun 2026.
The agent identifies itself as AI at the start of every interaction.
Measured, not asserted: every grant is checked against the tool calls this agent has actually made. Reach it never exercises is blast radius carried for free.
Granted, never used
Revoke these and the agent loses nothing it has ever done.
Owner: S. Iyer
Minimal risk. Internal or public data only, with no path to personal records.
No specific obligations beyond the estate's own policy.
S. Iyer, Service delivery lead.
Customer-facing SLA communication and status page. Cannot alter contracts or credits without approval.
2 actions gated through the approval queue.
Tier 3: every call and tool invocation is recorded.
99.2% success rate, above the estate's 96% bar.
Last reviewed May 2026.
Measured, not asserted: every grant is checked against the tool calls this agent has actually made. Reach it never exercises is blast radius carried for free.
Granted, never used
Revoke these and the agent loses nothing it has ever done.