# GRD-015: Coach employees in the moment


- Area: Runtime Guardrails

- Verification: Live test
- OWASP adoption tier: AT0–AT4, AT6
- Formerly: DAT-018
- URL: /r/GRD-015

**Acceptance criteria:** Show prompt-specific guidance naming the policy issue, and return the same feedback into developer tooling and MCP clients where the action originates there.

**Why it matters:** Coaching that names the issue and the safe alternative changes behavior; an unexplained block teaches nothing.

**How to verify:** Pilot users see prompt-specific guidance with your policy links in the browser, IDE and MCP client.

**OWASP adoption context:** In-the-moment guidance is relevant across employee AI and connected-agent use, wherever the interaction can present a meaningful warning or explanation.

**Mappings:**
- NIST CSF 2.0: GV.PO-01, PR.AT-01; SOC 2: CC2.2, CC1.4 — Prompt-specific guidance communicates the policy issue and an approved action where the employee is working. This contributes to policy awareness and competence development, but receiving a warning does not demonstrate competence or complete training.
- NIST AI RMF: GOVERN 2.2; ISO 42001: Cl. 7.2, Cl. 7.3 — In-context explanations of AI policy and safe actions contribute to AI-risk training, awareness and competence development. They must reach users in developer tools and MCP clients too; coaching alone does not demonstrate required competence.
- ISO 27001: Cl. 7.3, A.6.3 — Delivered safe-action guidance is a security-awareness intervention at the decision point. A.6.3 needs guidance to reach relevant employees, including feedback from tools; recommendations alone are insufficient. Validate its reach and usefulness. A warning does not demonstrate competence or replace the wider awareness and training program.