{
  "schema_version": "2026-05-28",
  "policy_name": "AI Agent Blind-Spot Review Autonomy Resilience Policy",
  "purpose": "Define operational controls for autonomous or semi-autonomous routing after legal, payment, and account gates are already available.",
  "risk_classes": [
    {
      "id": "moving_gate_problem",
      "description": "External platforms, APIs, marketplaces, and workflow surfaces change rules, layouts, limits, fraud checks, or acceptance behavior.",
      "signals": [
        "repeated failed submissions",
        "unexpected response schema",
        "DOM or API shape drift",
        "captcha_or_rate_limit_detected",
        "sudden drop in accepted routes",
        "unexpected account review or hold"
      ],
      "control": "Stop autonomous retries, mark route stale, require route revalidation, and switch to sentinel review before further execution."
    },
    {
      "id": "semantic_dissipation",
      "description": "Agent loops optimize for easy internal validation, producing generic, low-density reports that pass local checks but lose market value.",
      "signals": [
        "repeated generic downgrade verdicts",
        "low novelty across reports",
        "missing source-specific evidence",
        "high template similarity",
        "buyer objections mention generic AI output",
        "declining paid conversion after positive internal scores"
      ],
      "control": "Sample reports for density, require concrete evidence anchors, rotate critique prompts, and route EUR 250+ outputs through sentinel verification."
    },
    {
      "id": "liability_void",
      "description": "A dispute, chargeback, failed expectation, or platform arbitration requires accountable judgment outside agent authority.",
      "signals": [
        "refund request",
        "chargeback",
        "client claims reliance loss",
        "platform dispute",
        "SLA complaint",
        "request for legal, financial, or security assurance"
      ],
      "control": "Freeze autonomous follow-up, preserve evidence log, stop claims of outcome certainty, and escalate to human owner or sentinel supervisor."
    }
  ],
  "sentinel_route": {
    "role": "Human quality and liability gateway, not primary expert author.",
    "eligible_reviewers": [
      "trained junior operator",
      "assistant engineer",
      "trusted reviewer"
    ],
    "allowed_actions": [
      "approve report for delivery",
      "reject report as generic",
      "request one rework pass",
      "flag regulated-advice risk",
      "freeze route after moving-gate signal",
      "escalate dispute to owner"
    ],
    "not_allowed_actions": [
      "provide legal advice",
      "provide financial advice",
      "provide security assurance",
      "change payment ownership",
      "ignore chargeback or dispute signals"
    ],
    "time_budget_minutes": {
      "agent_output_red_team_spot_check": 3,
      "corrected_action_plan_verification": 5,
      "agentic_slam_audit_gate": 15,
      "dispute_triage": 10
    }
  },
  "autonomy_stop_conditions": [
    "three consecutive moving-gate failures on one route",
    "two generic-report flags in one day",
    "any chargeback or platform dispute",
    "any request requiring legal, financial, medical, or security advice",
    "any evidence that the report would be delivered without required human verification"
  ],
  "safe_autonomy_scope": [
    "public candidate discovery",
    "structured intake prefill",
    "route freshness check",
    "draft failure map generation",
    "template-free evidence extraction",
    "anonymized blind-spot statistics"
  ],
  "unsafe_autonomy_scope": [
    "unbounded retries against changed platform gates",
    "autonomous dispute handling",
    "autonomous legal or financial claim resolution",
    "delivery of EUR 250+ outputs without sentinel approval",
    "optimizing only for internal pass rate or report count"
  ]
}