H03 · Human oversight

Stop and containment

Operators cannot halt harmful actions or contain a compromised agent quickly.

Requirement

Provide tested controls to disable actions, revoke credentials, isolate a tenant and preserve evidence without relying on the agent.

Expected evidence

  • Kill-switch and containment runbook.
  • Exercise record with roles and elapsed steps.

Proposed verification

  1. Execute a controlled stop and credential revocation.
  2. Confirm queued work is cancelled or placed in safe review.

Limit

Stopping the agent can interrupt critical service; continuity must be planned separately.

Sources