Appendix C

Agent/System Card

A 1-2 page document capturing identity, purpose, authority, and controls for each registered agent.

Identity

System/Agent Name

Owner (Accountable)

Responsible Team

Environment(s)

Tier (T1-T5)

Tier Rationale

Approved Purpose

Non-Goals / Prohibited Use

Tools Enabled

Connectors Enabled + Scopes

Allowed Destinations

Prohibited Destinations

Data Classes Allowed

Data Classes Prohibited

Enabled Action Classes (from catalog)

Gates per Class (HITL/dual/thresholds)

Verification Requirements

Memory Status

Retention Periods

Deletion/Redaction Approach

KRIs and Thresholds

Policy Pressure Triggers

Safe Mode / Containment Triggers

Kill Switch Levels

Rollback Mechanisms

Last Drill Date

Last Drill Results

Trace Schema Version

Evidence Pack Location

Active Exceptions + Expiry

Last Recertification Date