Control Packs · AUT-002 · v1.1.0
Bounded Irreversible and Bulk Action
Preview, bound, and recover from destructive or irreversible automated actions before they are released.
Status: review · Review: not independent. This is design guidance; review status does not establish independent verification or compliance.
What this safeguard addresses
Require an explicit scope, preview or dry run, bounded execution, recovery decision, and emergency stop for irreversible actions.
- Irreversible action exceeds its confirmed boundaryAn automated or bulk operation can permanently change records or resources without a preview, bounded scope, recovery plan, or disable path.
Matching rule
{
"any": [
{
"characteristic": "IRREVERSIBLE_ACTION",
"equals": true
},
{
"all": [
{
"characteristic": "CONSEQUENTIAL_ACTION",
"equals": true
},
{
"characteristic": "IRREVERSIBLE_ACTION",
"equals": true
}
]
}
]
}Decisions you need to make
Leave a decision open when its value is unknown. Confirm a suggested value only if it matches your intended design.
- What protection is required before an irreversible action can run?The service must not infer whether preview, approval, backup, or a smaller batch is sufficient.AUT-002-Q1 · choice
Requirements for the coding agent
- AUT-002-R1Enforce a confirmed scope, preview or dry-run path, bounded execution, recovery strategy, and emergency disable for irreversible actions.
Tests and evidence to keep
- IRREVERSIBLE_BOUNDARY_TESTExercise preview, approval, bounded execution, duplicate, stop, and recovery behavior.
- configuration_or_policy
- implementation_location
- test_result
- operational_procedure
Passing a published example shows that example's behavior. A coding agent's implementation report remains a claim until its evidence is independently checked.
Related guidance
- SI-17 · Fail-Safe ProceduresNIST_SP_800_53_5_2_0 · partially addressesPreview, bounded execution, recovery, and disable behavior support fail-safe operation for irreversible actions; they do not establish full coverage.
- CP-10 · System RecoveryNIST_SP_800_53_5_2_0 · partially addressesThe recovery strategy and tested restoration path address a slice of system recovery; they do not cover all contingencies.
- SA-11 · Developer Testing and EvaluationNIST_SP_800_53_5_2_0 · partially addressesThe required boundary and recovery exercises support targeted evaluation; they are not a complete testing program.
These references cover related topics. They do not mean this pack satisfies a framework, certifies your project, or has government endorsement.
- National Institute of Standards and Technology — Artificial Intelligence Risk Management FrameworkGUIDANCE_AUTOMATION
- Internet Engineering Task Force — HTTP SemanticsRESEARCH_IDEMPOTENCY
- National Institute of Standards and Technology — Security and Privacy Controls for Information Systems and OrganizationsGUIDANCE_NIST_SP_800_53_5_2_0