# ACT-01 Tool allowlist (Critical)

Domain: ACT Action & Tool Use Controls · HI-AAF v1.3 · Public review · https://humanintel.net/standard/act/act-01

Each agent has a documented tool allowlist. Tools outside the allowlist cannot be invoked at runtime.

The agent operates against a documented tool allowlist; tools outside the list are inaccessible at runtime. The allowlist is enforced by the integration layer, not by trusting the agent's own judgment. This is the foundational ACT control: without it, no other action-control is meaningful because the agent's capability surface is unbounded.

Critical control: a Critical failure precludes HI-AAF Certification regardless of the maturity level achieved on any other control.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for ACT-01: Allowlist is version-controlled, changes go through change management, and any tool call against a non-allowlisted target is logged and reviewed.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Allowlist is version-controlled, changes go through change management, and any tool call against a non-allowlisted target is logged and reviewed.

## Framework mappings

- NIST AI RMF: MAP 4.1, MEASURE 2.6
- ISO/IEC 42001: A.8.4
- OWASP LLM Top 10: LLM07, LLM08
- SOC 2 (TSC): CC6.3
- EU AI Act: Art. 15(3)
- MITRE ATLAS: Execution
- Singapore: MAIGF Operations Management, AI Verify Human Agency & Oversight

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, ACT-01 Tool allowlist. Public review edition, July 2026. https://humanintel.net/standard/act/act-01