The institution's configurable rulebook. Controls come from organisational policy, regulation, product rules, and user mandates. Generic controls (authorisation, exposure limits) are typically deterministic. AI-specific controls (evidence quality, envelope integrity) may involve probabilistic or semantic assessment.

Topics

Related terms

SAFR whitepaperp. 10

Mandate

A machine-readable delegation of authority from a user to an agent, defining what it may do and within what limits.

SAFR whitepaperp. 16

Evidence Quality

A control category setting minimum confidence and evidence requirements for autonomous execution.

SAFR whitepaperpp. 10โ€“11

Disposition Engine

The component that evaluates an action against applicable controls and resolves it to one of four outcomes.