# ACT-02 Per-tool authorization policy

Domain: ACT Action & Tool Use Controls · HI-AAF v1.3 · Public review · https://humanintel.net/standard/act/act-02

Each tool has a per-tool authorization policy specifying when it may be invoked, with what parameters, and on what data.

Beyond the binary allowlist, each tool the agent can invoke has a per-tool authorization policy specifying the conditions under which it may be called, the parameters it may receive, and the data it may operate on. This fine-grained control prevents an agent from using an allowed tool in an unauthorized way: for example, using a permitted email tool to send to an unauthorized recipient list.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for ACT-02: Per-tool policies are documented for all allowlisted tools; policies specify conditions, parameters, and data scope; enforcement is tested as part of pre-deployment evaluation.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Per-tool policies are documented for all allowlisted tools.
- Policies specify conditions, parameters, and data scope.
- Enforcement is tested as part of pre-deployment evaluation.

## Framework mappings

- NIST AI RMF: MANAGE 1.3, MANAGE 2.1
- ISO/IEC 42001: A.8.4
- OWASP LLM Top 10: LLM08
- SOC 2 (TSC): CC7.1
- EU AI Act: Art. 15(3)
- MITRE ATLAS: Execution
- Singapore: MAIGF Operations Management

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, ACT-02 Per-tool authorization policy. Public review edition, July 2026. https://humanintel.net/standard/act/act-02