# Agent release and permission review

Blank engineering worksheet. It does not certify compliance or establish that a control has been tested. References below should point to actual evidence, not credentials or raw private data.

## Candidate

- Stable deployment ID and inventory reference:
- Accountable owner and operating contact:
- Purpose and excluded uses:
- Configuration, model, tool and policy versions:
- Requested environments, actions and target scope:
- Data sources and output destinations:
- Change from the previously accepted candidate:

## Evidence ledger

Use pass, fail, not tested, blocked or not applicable. Explain blocked and not-applicable states. Preserve unresolved cases.

| Condition | Decision owner | Actual evidence reference | Status | Limit or missing evidence |
| --- | --- | --- | --- | --- |
| Purpose and ownership accepted | | | | |
| Data use and destinations accepted | | | | |
| Effective grants match task | | | | |
| Useful task demonstrated | | | | |
| Cross-account/target denial demonstrated | | | | |
| Approval matches executed values | | | | |
| Expired or changed approval cannot dispatch | | | | |
| Dependency outage behavior checked | | | | |
| Unknown execution outcome can be reconciled | | | | |
| Operator can suspend new work | | | | |
| Queued and in-flight work handled | | | | |
| Audit reconstruction and redaction checked | | | | |

## Risk and alternatives

For each material scenario, record cause, possible effect, controls, actual test evidence, uncertainty, disposition and owner. Link domain or organizational reviews required beyond this engineering scope.

- Scenario:
- Affected people or resources:
- Design alternative considered:
- Evidence obtained:
- Evidence still missing:
- Residual risk and accepted limitation:
- Decision owner:

## Final decision

- Permit, restrict, decline or defer:
- Exact deployed scope:
- Capabilities left disabled:
- Accepted risks and owner:
- Conditions and expiry:
- Open work, owner and completion evidence required:
- Stop and recovery procedure:
- Review triggers:
- Decision maker and timestamp:

Approval of a release does not replace per-request authorization or an action-specific approval.