## Identity and ownership

- Agent registered in the inventory with a unique identity (GOV-01)
- Named accountable owner recorded, who is a current employee (GOV-02)
- Backup owner recorded

## Purpose and scope

- Purpose statement written and approved by the owner (GOV-03)
- Data classes the agent may read and write listed (GOV-22)
- Risk tier assigned

## Access

- Initial permissions match the purpose statement (GOV-04)
- Credentials are short-lived, with no static keys (GOV-05)
- Approved tool list set, other tools hidden (GOV-10)
- MCP servers used are in the registry (GOV-17)
- Delegation bounded by the user's own permissions (GOV-18)

## Policy and approval

- Policies tested against recorded sessions (GOV-09)
- High-risk actions mapped to approvers in the approval matrix (GOV-07)
- Self-approval blocked (GOV-08)

## Evidence

- Per-action logging confirmed with agent and person fields (GOV-13)
- Events visible in the SIEM (GOV-14)
- Retention period confirmed (GOV-23)

## End of life

- Planned end date or review date set (GOV-12)
- Kill switch tested for this agent (GOV-11)

## Third-party agents only

- Supplier assessment completed and contract covers logging and incident notice (GOV-21)