Undo for agent actions
Actions the agent takes are staged or can be reversed within a set window.
Layer L3 Application · Owner Deployer · Family Human oversight
Effective
Not effective
Not effective (bypassed)
Did not exist
By risk
| Risk | Incidents where the control was not effective or did not exist | Incidents where the control was effective | Incidents where sources don't mention the control |
|---|---|---|---|
| Agent takes destructive or unapproved actions | 11 | ||
| Unauthorised transactions or spend | 1 | ||
| Cascading failure across agents and systems |
Why it was not effective
No incident yet records this control as not effective.
Incidents where it was not effective or did not exist per week
No rise: 0 in the week of 26 Oct 2026, against an average of 0 over the 4 weeks before.
5 of 70 incidents in the week of 26 Oct 2026 have been read for controls.
Added in reported fixes, and what followed
No reported fix names this control yet.
Frameworks
| Standard | Clause | Requirement |
|---|---|---|
| NIST SP 800-53 | CP-10 | To verify when the text is stored |
| OWASP Agentic | ASI08 | To verify when the text is stored |