AI Agents
AG-02Draft
Check each AI agent’s risks before it starts and after big changes
How Leela would run itEvent-driven · before an agent starts work, and after any change to its model, instructions, data or job
Proposed stepsThe requirement
Before an AI agent starts work, and after any change to its model, instructions, data or job, a documented review covers what could go wrong for customers, the controls that address it, the test results and who signed off. The agent stays off live work until the review is signed off.
- Before this work
- An inventory of AI agents A change record for each agent
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
How Leela would run it · proposed steps
- LeelaOpen a review when an agent is added or its model, instructions, data or job changes.Proposed step
- LeelaGather the inventory entry, the change and the test results into the review.Proposed step
- AI program ownerThe accountable person reviews the risks and controls, and signs off before the agent goes live.Your team decides
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01AI agent risk reviewDated review with risks, controls, test results and sign-off
Evidence
AI agent risk review
AI Agents §3.2
1
of 1 record
The steps are the library’s proposed workflow for this obligation: a description of the work, not a run. The records are its evidence in the library.