Complete this before a consequential action. The authoritative check should follow the result into the system that owns it.
Authority
Task / authorized requester:
Target object and stable identifier:
Intended final state:
Permitted action / approval boundary:
Identity and permission scope the action runs under (should be the minimum for this action, not the requester's full access):
Authority expires (time or condition):
State that must remain unchanged:
Authoritative verification method:
Expected processing delay / pending behavior:
Duplicate protection (idempotency key, pre-check, or destination guarantee):
Attempts
| Attempt / time | Action | Destination response | Observed final state | Evidence reference | Status |
|---|---|---|---|---|---|
Use a status that matches the evidence: drafted, submitted, pending, verified, partially complete, or failed.
Uncertain result
Duplicate consequence:
Pre-check / supported retry protection:
Stop and human-escalation condition:
Correction or recovery owner:
Rollback path if the action was wrong but succeeded:
Before the result is used
- [ ] The result was checked in the owning system, not inferred from the assistant's own report.
- [ ] Output passed to another system or person was validated for format, scope, and plausibility first.
- [ ] Any human approval given is recorded with who, when, and what exactly was approved.
- [ ] People affected by the change are informed where the business expects it.
- [ ] The log entry records requester, identity used, action, target, result, and evidence reference without copying sensitive contents.
User-facing completion
Confirmed result:
Unresolved items and next step:
Common failure modes
- "Done" means the request was sent, not that the destination accepted it.
- A retry after a timeout completes the action twice.
- The assistant's summary of the final state is taken as the final state.
- The action ran under a person's full permissions because a narrower identity did not exist.
Store evidence with access appropriate to the task; avoid copying sensitive contents into a broad activity log.
This contract covers one consequential action. It does not review whether the assistant should have this authority at all; use the agent authority review for that.