Before you expand an agent workflow

Use these questions to identify missing decisions and evidence. This is a planning checklist, not a security certification or a scored audit. For each answer, record an owner, a concrete example and the evidence you have. Unknown is a useful result when it identifies the next check.

Question	Evidence to record
Which data may leave your chosen environment?	Data classes, approved destinations and decision owner
Which tool, SDK and telemetry paths bypass the gateway?	A reviewed connection map
How do you revoke one agent's access?	A tested revocation procedure and observed propagation
Which actions require approval, and who enforces it?	Approval boundary and negative test
Are failed attempts, fallbacks and subscriptions included in costs?	Coverage and explicit exclusions
What counts as an accepted task?	Independent acceptance criteria and verifier version
Can the agent modify its own checks?	Protected verifier and workspace boundary
How do you recover or roll back a model-route change?	An exercised runbook

Record each item as established, partial, unknown or not applicable. An answer is not established by a product checkbox alone. Use a test, configuration review or other relevant evidence for the actual deployment.