{"id":"AGT-003","section":"Agent & MCP Governance","requirement":"Inspect sensitive data retrieved through connectors mid-workflow","acceptance":"Detect when an agent picks up sensitive content from one connnected tool and attemps to share it with a separate tool, even if the user prompt was benign.","tier":"AT3, AT4, AT6","whyItMatters":"Connectors pull sensitive data into a conversation even when the user's question is harmless.","verificationMethod":"LT","verificationTest":"When an agent picks up sensitive information from one tool or dataset and attempts to share it with a different tool, the even is blocked if it violates policy.","formerly":null,"alsoIn":["guardrails"],"sort":38,"adoptionContext":"Embedded assistants, integrated platforms, citizen workflows and MCP extensions can retrieve sensitive data after a benign prompt; inspect the returned payload.","mappings":[{"frameworks":["csf","soc2","iso27001"],"explanation":"Inspecting connector payloads reveals sensitive information entering a workflow even when the prompt is benign, supplying runtime evidence for transfer, confidentiality and leakage controls. Detection alone does not restrict later disclosure; finding sensitive content also does not establish poisoned context.\nSOC 2: C1.1: The Confidentiality category and relevant information must be in scope.\nISO/IEC 27001: A.8.12: Operate inspection within a leakage-protection workflow with defined alert triage, warnings, blocking or another protective response.","kind":"framework","references":{"csf":["PR.DS-02","DE.CM-09"],"soc2":["CC6.7","C1.1"],"iso27001":["A.8.12"]},"relation":null,"conditions":[]},{"frameworks":["rmf"],"explanation":"Where retrieved content includes personal data, the findings inform examination of privacy risk within the AI workflow. Recognizing sensitive content is one input to that examination, not a complete privacy-risk assessment.","kind":"framework","references":{"rmf":["MEASURE 2.10"]},"relation":null,"conditions":[]}],"area":"Agent & MCP Governance","areaSlug":"AGT","url":"/r/AGT-003","frameworkRefs":{"ISO27001":["A.8.12"],"NIST-CSF":["PR.DS-02","DE.CM-09"],"NIST-AI-RMF":["MEASURE 2.10"],"SOC2":["CC6.7","C1.1"]}}