Record an agent's declared authority and shutdown owner.
Before an assistant receives an action, name the principal, resource, permission, expiry and person who can stop the action. Keep the unanswered authority questions with the evidence.
The review question and the inputs.
For a risk officer or COO reviewing an employee assistant, an AI feature from a vendor or a customer-delegated assistant.
- The proposed principal role and accountable business owner
- The declared action, resource and data categories
- Permission evidence and stated human review checkpoints
- The expiry, revocation route and shutdown owner, or an explicit unknown for each
The file your team keeps.
A six-column file of the agent use, evidence and authority questions The declared principal, action, resource and time boundary
Six columns: Use, Where it runs, Data it can touch, Owner, Evidence on hand, Question still open. The institution fills the decision line.
How the agent authority works.
Name the principal and action
Separate an employee use, a vendor capability and a customer-delegated assistant. Write down the principal role and the specific action proposed.
Bound the resource and permission
Record the declared resource, data categories and permission evidence. Mark the human checkpoint and any permission whose meaning remains open.
Locate expiry and shutdown
Put the expiry and revocation route beside the permission. Name the role responsible for stopping the action and record missing shutdown evidence.
Review the authority boundary
The accountable owner checks whether each declaration has supporting evidence. The institution records the accepted scope and any remaining condition before authorization.
Read a short evidence row.
Illustrative inputs, not a client.
| Use | Where it runs | Data it can touch | Owner | Evidence on hand | Question still open |
|---|---|---|---|---|---|
| Assistant with a proposed action | The declared assistant environment | The declared resource; data categories remain open | Principal and shutdown owner to be named | Proposed permission; expiry and revocation questions remain open | Who approves the action, and who can revoke or stop the action? |
Decision: ________________________
Who signs off on the file.
The institution's accountable business owner and risk reviewer, with the role responsible for revocation and shutdown.
Two to four weeks. Timing starts when the agreed inputs and review owner are available.
The method and scope.
Fee fixed in writing after one working session.
A review prepares a file. It does not certify compliance, give a legal opinion or connect to a core.
Start with the AI review on the calendar.
Bring the review question, deadline and accountable role. We reply to business inquiries within one business day.
Request a call Email info@llmsquared.com