{
  "notice": "Illustrative mapping from the AI Governance Engineer Body of Knowledge v0.5.0 (not a claim of conformity)",
  "version": "0.5.0",
  "license": "CC BY 4.0",
  "licenseUrl": "https://creativecommons.org/licenses/by/4.0/",
  "schemaVersion": 1,
  "schema": "https://aigovernanceengineer.com/api/v1/schemas/control.json",
  "self": "https://aigovernanceengineer.com/api/v1/controls/aige-ctl-agent-035.json",
  "source": "https://aigovernanceengineer.com/controls/agent-runtime#aige-ctl-agent-035",
  "citation": {
    "title": "AI Governance Engineering: The Thesis & Body of Knowledge",
    "authors": [
      "Jorge García Aibar"
    ],
    "parentDoi": "https://doi.org/10.5281/zenodo.22956197",
    "conceptDoi": "https://doi.org/10.5281/zenodo.22857084"
  },
  "control": {
    "id": "AIGE-CTL-AGENT-035",
    "profile": "agent-runtime",
    "url": "https://aigovernanceengineer.com/controls/agent-runtime#aige-ctl-agent-035",
    "json": "https://aigovernanceengineer.com/api/v1/controls/aige-ctl-agent-035.json",
    "title": "Agents that watch agents are governed agents",
    "version": "0.2",
    "status": "draft",
    "reviewerStatus": "open",
    "depth": "derived",
    "objective": "An agent that monitors other agents in real time has its own identity, scope and stop, reads the traces it watches but holds none of the tools of the agents it watches, and sends its flags on anomalies and inconsistencies to a person or to the breaker, not back to the agent it flagged.",
    "failureModes": [
      "A monitoring agent can call the tools of an agent it watches, or runs with no identity, scope or stop of its own.",
      "A monitoring agent's flag goes back to the agent it flagged and reaches no person and no breaker."
    ],
    "scope": "Agents that monitor other agents in real time.",
    "enforcementPoints": [
      "runtime"
    ],
    "verification": [],
    "evidence": [
      {
        "artefact": "The monitoring agent's registry entry; its flags and what followed them",
        "schemaId": null,
        "schema": null,
        "layer": 4
      }
    ],
    "failureResponse": {
      "effect": "alert",
      "text": "To be specified."
    },
    "layer": 4,
    "secondaryLayers": [],
    "patterns": [
      {
        "slug": "runtime-guardrail",
        "title": "Runtime Guardrail",
        "url": "https://aigovernanceengineer.com/patterns/runtime-guardrail"
      }
    ],
    "seeds": [
      {
        "id": "monitoring-agents",
        "title": "Agents that watch agents are governed agents",
        "url": "https://aigovernanceengineer.com/bok/governing-agents#an-agent-incident-taxonomy"
      }
    ],
    "derivedFrom": [],
    "mappings": {
      "obligations": [],
      "iso42001": [],
      "nistAiRmf": [],
      "owasp": [],
      "atlas": [],
      "aiuc1": [],
      "csaAicm": [],
      "other": [
        {
          "framework": "IMDA MGF for Agentic AI v1.5",
          "ref": "2.3.3 Continuous testing and monitoring, p.44",
          "note": "Partial fit: Agents monitoring other agents in real time, flagging anomalies or inconsistencies (also p.30); the governance of the monitoring agent itself is the book's addition"
        }
      ]
    },
    "references": [
      {
        "n": 17,
        "title": "Governing AI agents",
        "text": "Governing AI agents (AI Governance Engineering Body of Knowledge v0.5.0, chapter 23, section \"An agent incident taxonomy\"). AI Governance Engineer (Jorge García Aibar). 2026-09.",
        "url": "https://aigovernanceengineer.com/bok/governing-agents#an-agent-incident-taxonomy",
        "verified": "primary"
      },
      {
        "n": 13,
        "title": "Governing AI agents",
        "text": "Governing AI agents (AI Governance Engineering Body of Knowledge v0.5.0, chapter 23, section \"Execution limits\"). AI Governance Engineer (Jorge García Aibar). 2026-09.",
        "url": "https://aigovernanceengineer.com/bok/governing-agents#execution-limits",
        "verified": "primary"
      },
      {
        "n": 4,
        "title": "Model AI Governance Framework for Agentic AI, v1.5",
        "text": "Model AI Governance Framework for Agentic AI, v1.5 (published 2026-05-20, updated 2026-06-05; four dimensions: assess and bound the risks upfront, make humans meaningfully accountable, implement technical controls and processes, enable end-user responsibility). IMDA. 2026-06-05.",
        "url": "https://www.imda.gov.sg/-/media/imda/files/about/emerging-tech-and-research/artificial-intelligence/mgf-for-agentic-ai.pdf",
        "verified": "primary"
      }
    ],
    "implementationNotes": [],
    "openQuestions": [
      "Verification procedure and evidence schema to be specified; requires technical review."
    ],
    "observation": null,
    "observationSchema": "https://aigovernanceengineer.com/schemas/control-observation.v1.json",
    "examples": []
  }
}