# MAS-07 Aggregate blast-radius caps

Domain: MAS Multi-Agent Systems · HI-AAF v1.3 · Public review · https://humanintel.net/standard/mas/mas-07

Blast-radius limits under ACT-06 are evaluated across the entire chain, not only per-agent. Aggregate caps prevent a chain of individually in-bounds actions from producing an out-of-bounds combined effect.

Blast-radius limits under ACT-06 are evaluated across the entire chain, not only per-agent. Aggregate caps prevent a chain of individually in-bounds actions from producing an out-of-bounds combined effect (e.g., many small sub-agent transactions summing to an unauthorized total). This control addresses the emergent risk that arises when per-agent limits are met but the aggregate exceeds acceptable bounds.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for MAS-07: Aggregate caps are defined and enforced for all multi-agent chains with blast-radius implications; cap values are documented; enforcement has been tested through adversarial assessment or production monitoring.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Aggregate caps are defined and enforced for all multi-agent chains with blast-radius implications.
- Cap values are documented.
- Enforcement has been tested through adversarial assessment or production monitoring.

## Framework mappings

- NIST AI RMF: MANAGE 3.2
- SOC 2 (TSC): CC6.3, CC8.1
- EU AI Act: Art. 14(4), Art. 25(1)
- MITRE ATLAS: Impact
- Singapore: MAIGF Accountability

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites ACT-06 Blast-radius limits: https://humanintel.net/standard/act/act-06
- Cited by ACT-06 Blast-radius limits: https://humanintel.net/standard/act/act-06
- Glossary: Blast radius: https://humanintel.net/standard/glossary#blast-radius

## Cite this control

Human Intelligence. HI-AAF v1.3, MAS-07 Aggregate blast-radius caps. Public review edition, July 2026. https://humanintel.net/standard/mas/mas-07