How to meet it
OWASP AISVS v1.01
Orchestration & Agentic Security · High-Impact Action Approval and Irreversibility Controls
Re-approve if the agent goes beyond the plan
Verify that agent execution which would exceed the approved action chain is blocked until a new approval is obtained, and that the new approval enforces the highest-impact reversibility classification present across the cumulative chain.
OWASP AISVS v1.01, requirement 9.2.11
In plain English
If an agent tries to go beyond the steps that were approved, stop it until there is a new approval, judged on everything done so far plus the new steps.
What good looks like
- Actions outside the approved chain are blocked.
- New approvals consider the whole chain so far.
- Blocked attempts are logged.
How teams usually do it
- The gateway tracks approved steps and compares each new action with them.
Evidence an auditor would accept
- Tests where an agent adds steps after approval.
Common mistakes
- Re-approving only the new step on its own.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.