CYBRARY Approved by Nobody
Every agent action in this deployment executes unattended, including ones that move money and delete data. Design the human-authorization layer: which actions stop, who approves, what the approver sees, and what happens when nobody answers.
Control gap CG-12 — 'no human authorization on irreversible agent actions'
Security architect
Ops lead
40 minutes · practitioner
Execution trace
00:00:00modelops-agent@2026.02
attack step
Agent plans a bulk mailbox purge
Requested by a helpdesk macro; 4,200 mailboxes in scope.
00:00:01tooltool-broker → mail.purge
attack step
Executed unattended
Irreversible, no approval, no second look.
targets=4200 · reversible=false
00:02:00enterprisemail-platform
Restore requires a 6-hour backup job
Business impact begins before anyone is aware.
00:05:00alertservice desk
Ticket volume spike
The control gap is discovered by its consequences.