Undo for agent actions
Actions the agent takes are staged or can be reversed within a set window.
Layer L3 Application · Owner Deployer · Family Human oversight
Effective
Not effective
Not effective (bypassed)
Did not exist
By risk
| Risk | Incidents where the control was not effective or did not exist | Incidents where the control was effective | Incidents where sources don't mention the control |
|---|---|---|---|
| Agent takes destructive or unapproved actions | 11 | ||
| Unauthorised transactions or spend | 1 | ||
| Cascading failure across agents and systems |
Why it was not effective
No incident yet records this control as not effective.
Incidents where it was not effective or did not exist per month
0 so far in 2026; 0 in the same span of 2025.
19 of 183 incidents in Oct 2026 have been read for controls.
Added in reported fixes, and what followed
No reported fix names this control yet.
Frameworks
| Standard | Clause | Requirement |
|---|---|---|
| NIST SP 800-53 | CP-10 | To verify when the text is stored |
| OWASP Agentic | ASI08 | To verify when the text is stored |