How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · AI-Generated Infrastructure & Pipeline Artifacts
Human approval before AI infrastructure runs
Verify that AI-generated infrastructure and pipeline configurations require human review and approval before they run in any environment beyond a hermetic sandbox.
OWASP AISVS v1.01, requirement AC.7.2
In plain English
AI-generated infrastructure and pipeline changes need human review and approval before they run anywhere beyond an isolated sandbox.
What good looks like
- Apply and deploy steps require approval for AI-generated changes.
- Only sandboxes run them without approval.
- Approvals are logged.
How teams usually do it
- Plan-then-apply workflows with required approvals.
Evidence an auditor would accept
- Pipeline configuration and approval logs.
Common mistakes
- Auto-applying AI-generated Terraform in a shared development account.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.