{"id":"AGT-002","section":"Agent & MCP Governance","requirement":"Flag destructive, over-scoped or anomalous agent actions","acceptance":"Detect excessive permissions, unexpected tools, destructive operations, abnormal call sequences and policy bypass.","tier":"AT3, AT4, AT6","whyItMatters":"Destructive or unusual agent actions are often the first sign of a hijacked or misconfigured agent.","verificationMethod":"LT","verificationTest":"A destructive or out-of-pattern tool call in the pilot is flagged with context.","formerly":null,"alsoIn":["aidr"],"sort":37,"adoptionContext":"The listed connected-agent contexts can produce abnormal tool sequences, excessive scope or destructive operations that ordinary prompt inspection may miss.","mappings":[{"frameworks":["csf","iso","soc2","iso27001"],"explanation":"Detecting destructive operations, unexpected tools, abnormal call sequences and policy bypass supplies adverse-event analysis and monitoring of agent behavior. Excess-permission findings also inform access-right review; detection does not prevent an operation or reduce its permissions.\nISO/IEC 27001: A.8.16: Event assessment and response remain wider dependencies; test false-positive and response handling.","kind":"framework","references":{"csf":["DE.AE-02","DE.CM-09"],"iso":["A.6.2.6"],"soc2":["CC7.2","CC6.3"],"iso27001":["A.8.16","A.5.18"]},"relation":null,"conditions":[]},{"frameworks":["rmf"],"explanation":"Runtime findings supply the monitoring and evaluation component of post-deployment risk management. A detection capability alone does not establish the wider plan for user input, incident response, recovery and change management.","kind":"framework","references":{"rmf":["MANAGE 4.1"]},"relation":null,"conditions":[]},{"frameworks":["owasp"],"explanation":"Destructive calls and excessive permissions expose tool-misuse and identity-abuse patterns; abnormal sequences and policy bypass can also flag rogue-agent behavior. These are indicators for investigation, rather than proof that every anomalous agent is compromised or that the behavior is contained.","kind":"framework","references":{"owasp":["ASI02","ASI03","ASI10"]},"relation":null,"conditions":[]}],"area":"Agent & MCP Governance","areaSlug":"AGT","url":"/r/AGT-002","frameworkRefs":{"ISO27001":["A.8.16","A.5.18"],"ISO42001":["A.6.2.6"],"NIST-CSF":["DE.AE-02","DE.CM-09"],"NIST-AI-RMF":["MANAGE 4.1"],"SOC2":["CC7.2","CC6.3"],"OWASP-ASI":["ASI02","ASI03","ASI10"]}}