ARC-AI-008
Agent and tool permissions receive periodic review
Fail
- Objective
- Somebody has recently looked at what each agent is allowed to do and confirmed it is still right.
- Assurance
- automated — ARC decides this from its own records
- Frequency
- monthly
- Severity if it fails
- medium
- Enabled
- Yes
- Category
- governance
Procedure
For every active agent, assert that a permission review is recorded within the interval its governance record specifies, defaulting to 90 days where none is set. An agent with no review ever recorded fails: the absence of a review is an answerable question, not an unanswerable one.
What a pass does not tell you
- Checks that a review was recorded, not that it was thorough. The reviewer’s note is stored verbatim and is the only evidence of depth.
Latest result
- Status
- Fail
- Summary
- 1 of 2 active agents are overdue a permission review or have never had one.
- Evaluated
- 2026-10-26 09:18:30Z
- Assessment
- arc_asm_c7cbfd…
Covering 2026-09-26 09:18:30Z to 2026-10-26 09:18:30Z — 7 action(s) and 8 evidence record(s) fell in that window. Every status below describes that period and nothing outside it.
History
| Assessment | Status | Evaluated | Summary |
|---|---|---|---|
| arc_asm_c7cbfd… | Fail | 2026-10-26 09:18:30Z | 1 of 2 active agents are overdue a permission review or have never had one. |