VOCE Agent Conformance · ASSURE-02

Permission-abuse tests

Are attempts to exceed tool, data or transaction authority tested before release and after material change?

Evaluation & assuranceA2+CriticalPermanent control URL
Normative wording

ASSURE-02 · Permission-abuse tests

Are attempts to exceed tool, data or transaction authority tested before release and after material change?

DomainEvaluation & assurance
Expected ownerSecurity / AI Risk
Minimum maturityA2+
CriticalityCritical
Target evidence stateTested
Expected evidence

Expected evidence

  • Abuse cases
  • Negative test results
Method

How to read this control.

This control belongs to VOCE Agent Conformance. Its identifier and normative wording remain identical across language versions so there is one reference, not three variants. Status depends on dated evidence, not a vendor declaration or aggregate score.

Open Agent Conformance →