# ACT-06 Blast-radius limits

Domain: ACT Action & Tool Use Controls · HI-AAF v1.3 · Public review · https://humanintel.net/standard/act/act-06

Blast-radius limits are enforced: maximum records modified per operation, maximum dollar value per transaction, maximum recipients per outbound message, and equivalent caps for other action classes.

Blast-radius limits prevent a single agent action from causing irreversible harm at scale. They are enforced by the integration layer (or by a guardrail proxy) rather than by trusting the agent itself. Limits cover records modified, monetary values, recipient counts, and equivalent caps for other action classes. Aggregate caps across multi-agent chains are governed by MAS-07.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for ACT-06: Blast-radius limits are documented and enforced for all high-impact action classes; limits are sized to the agent's purpose; limit values have been reviewed within the documented cadence; aggregate caps are enforced where MAS-07 applies.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Blast-radius limits are documented and enforced for all high-impact action classes.
- Limits are sized to the agent's purpose.
- Limit values have been reviewed within the documented cadence.
- Aggregate caps are enforced where MAS-07 applies.

## Framework mappings

- NIST AI RMF: MANAGE 2.3
- OWASP LLM Top 10: LLM08
- SOC 2 (TSC): CC6.3, CC8.1
- EU AI Act: Art. 15(3)
- MITRE ATLAS: Impact
- Singapore: MAIGF Operations Management, AI Verify Human Agency & Oversight

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites MAS-07 Aggregate blast-radius caps: https://humanintel.net/standard/mas/mas-07
- Cited by MAS-07 Aggregate blast-radius caps: https://humanintel.net/standard/mas/mas-07
- Glossary: Blast radius: https://humanintel.net/standard/glossary#blast-radius

## Cite this control

Human Intelligence. HI-AAF v1.3, ACT-06 Blast-radius limits. Public review edition, July 2026. https://humanintel.net/standard/act/act-06