From 30a148d2fd335167314adb737867abcbe2607ff7 Mon Sep 17 00:00:00 2001
From: mblanke <mblanke@gmail.com>
Date: Wed, 24 Dec 2025 13:26:34 -0500
Subject: [PATCH] Add Analyst Assist Agent Policy document

This document outlines the operational policies and functions of AI agents assisting analysts, including their allowed and prohibited actions, model sources, and trust model.
---
 governance/AGENT_POLICY.md | 60 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)
 create mode 100644 governance/AGENT_POLICY.md

diff --git a/governance/AGENT_POLICY.md b/governance/AGENT_POLICY.md
new file mode 100644
index 0000000..bab4cf4
--- /dev/null
+++ b/governance/AGENT_POLICY.md
@@ -0,0 +1,60 @@
+# Analyst Assist Agent Policy
+
+This document defines how AI agents operate across applications.
+
+---
+
+## Purpose of Agents
+
+Agents exist to assist analysts by:
+- Explaining system behavior
+- Interpreting findings
+- Suggesting investigative or operational next steps
+- Highlighting risks, assumptions, and alternatives
+
+Agents are collaborators, not decision-makers.
+
+---
+
+## Allowed Agent Functions
+
+Agents may:
+- Summarize data and findings
+- Answer analyst questions
+- Propose plans or hypotheses
+- Highlight inconsistencies or gaps
+- Explain tool outputs
+
+Agents may not:
+- Execute tools or workflows
+- Escalate findings to alerts autonomously
+- Modify data models or contracts
+- Act without analyst confirmation
+
+---
+
+## Model Sources
+
+Agents may use:
+- Local LLMs
+- Networked/shared LLM services
+- Online hosted LLM APIs
+
+No assumption is made about model provider or capability.
+All agents must degrade gracefully if a backend is unavailable.
+
+---
+
+## Trust Model
+
+- Agent output is advisory
+- Analysts retain final authority
+- Actions require explicit human approval
+- All agent interactions are logged
+
+---
+
+## Consistency Rule
+
+Agent behavior and tone should be consistent across applications,
+even if implementation details differ.