What to ask before AI touches production

Can the agent approve its own work?

Separate the request, the proposed change and the authority to execute it. Ask whether an agent can grant itself permissions, approve its own request or substitute a broad permission for an exact change approval. Identify the named client owners and the segregation-of-duties rules before a pilot begins.

What is bound to the approval?

A reviewer needs the specific change, destination, test evidence, impact assessment, rollback plan and authorized window. If the proposal changes after approval, the gate must be checked again. Four-eyes review and the action gateway should be operational controls rather than reassuring labels.

Where may the data go during an outage?

List the regions and provider tenancies permitted for each class of data. A backup model is only a valid fallback if it stays inside that boundary. Ask what happens when no permitted model is available: acknowledgements, a queue and human handoff are more useful than silent failure.

Can your team inspect and stop it?

Tenured by Ignite9 provides a sealed audit trail and a kill switch as part of its governed workflow. We do not claim SOC 2 or ISO 27001 certification today. Ask to inspect the evidence, test refusal and recovery paths, and validate one bounded process before authorizing a wider production scope.

Explore Tenured by Ignite9

• Tenured security and governance →
• Nine stages of support →
• Connector review →