When an assistant is part of the workflow
Who can act, on what, and until when?
Name the person represented, the action allowed, the resource involved, the expiry and how permission is revoked. Discovery is not authority.
Internal tools
What staff already use, which work it supports and who owns its permissions.
Vendor features
What a provider’s AI feature does in the institution’s workflow, and which questions remain unanswered.
Customer-delegated assistants
What the customer asks another assistant to do, and what the institution would need to know before allowing it.
The file you keep
Record the proposed permissions, expiry and revocation rules, review responsibilities, and cases where access should be refused or sent to a person. Keep unknown attribution and missing evidence visible.
Agent Access Lab
This is a simulation using supplied declarations. It does not verify identity, issue credentials, enforce access or perform a financial action. Input fingerprints do not prove identity.