Risk-Based Controls

Risk-based controls are governance measures calibrated to the level of risk an agent action carries. Low-risk actions may proceed automatically; medium-risk actions may require logging or rate limiting; high-risk actions may require human approval or be blocked entirely. Risk scoring considers factors such as data sensitivity, action reversibility, regulatory scope, and the identity of the user being served.