Bound risks through agent limits
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
Define limits on the agent's access to tools and systems (minimum necessary), constrain autonomy with SOPs for agentic workflows, and limit area of impact, e.g. self-contained environments and the ability to take malfunctioning agents offline.
From the source
“Define policies that give agents only the minimum tools and data access needed for it to complete its task.”
Section 2.1.2, Agent limits, p.11
What this connects to
3 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Cites2
- ConceptAction-space (authority, capabilities)Guidance
Agent limits bound action-space (tools, systems, read/write)
- ConceptAutonomy (decision-making)Guidance
SOPs constrain agent autonomy
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.