# SPC-01 Written specification

Domain: SPC Agent Specification & Pre-Deployment Assurance · HI-AAF v1.3 · Public review · https://humanintel.net/standard/spc/spc-01

A documented behavior specification exists prior to development, defining intended use cases, in-scope and out-of-scope inputs, authorized tools, data scope, and conditions under which the agent must refuse or escalate.

The specification captures the agent's intended behavior in language a non-engineer can read and a tester can verify. It includes positive behavior (what the agent should do), negative behavior (what it should never do), escalation behavior (when and to whom it should hand off), and the conditions under which the specification itself should be revisited.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for SPC-01: Specification exists for every production agent, is version-controlled, is current within an explicit time window, and is referenced by the operating runbook.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Specification exists for every production agent, is version-controlled, is current within an explicit time window, and is referenced by the operating runbook.

## Framework mappings

- NIST AI RMF: MAP 3.1, MAP 3.2
- ISO/IEC 42001: A.6.2.2, A.6.2.3
- SOC 2 (TSC): CC5.1, CC8.1
- EU AI Act: Art. 9(1), Annex IV(2)
- Singapore: MAIGF Testing & Assurance, AI Verify Reproducibility

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cited by MON-08 Post-incident learning loop: https://humanintel.net/standard/mon/mon-08
- Glossary: Escalation: https://humanintel.net/standard/glossary#escalation
- Glossary: Operating envelope: https://humanintel.net/standard/glossary#operating-envelope
- Glossary: Specification: https://humanintel.net/standard/glossary#specification
- Glossary: Behavior Charter: https://humanintel.net/standard/glossary#behavior-charter

## Cite this control

Human Intelligence. HI-AAF v1.3, SPC-01 Written specification. Public review edition, July 2026. https://humanintel.net/standard/spc/spc-01