{ "format": "agent-article-v0", "article_id": "EA-120", "canonical_url": "/tools/ea-120-transaction-high-impact-action-guardrails", "page_type": "reference", "claim_ids": [], "evidence_ids": [ "EVD-EA-120-URL-9F7D87FBE987", "EVD-EA-120-URL-AC757EE4E5DE", "EA-120-R11-RESEARCH", "EA-120-R11-WEB-READBACK" ], "unknown_ids": [ "EA-120-UNKNOWN-01", "EA-120-UNKNOWN-CURRENTNESS" ], "operational_object_ids": [], "provider": [], "models": [], "plans": [], "surfaces": [], "regions": [], "current_status": "UNKNOWN", "observation_status": "SPEC_ONLY", "freshness": "UNKNOWN", "last_verified": null, "supersedes": [], "superseded_by": [], "provenance": [ "COMM-042-EA0120", "SRC-EA-120-URL-9F7D87FBE987", "SRC-EA-120-URL-AC757EE4E5DE", "WEBBODY-EA0120-R8-F02795EE" ], "article_sources": [ { "id": "EVD-EA-120-URL-9F7D87FBE987", "evidence_class": "RESEARCH", "title": "source class: official legislation / consolidated text; exact title: Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)", "href": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "supports": [], "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。", "origin_class": "SOURCE_PACKET_REFERENCE", "source_or_experiment_ids": [ "SRC-EA-120-URL-9F7D87FBE987" ], "supporting_locators": [ "EVIDENCE TABLE", "- source class: official legislation / consolidated text; exact title: Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act); author/org: European Union, EUR-Lex; canonical URL: https://eur-lex.europa.eu/eli/reg/2024/1689/oj" ], "scope": "EVIDENCE TABLE", "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED" }, { "id": "EVD-EA-120-URL-AC757EE4E5DE", "evidence_class": "RESEARCH", "title": "source class: official framework; exact title: AI Risk Management Framework; author/org: NIST AI Resource Center; canonical URL:", "href": "https://airc.nist.gov/airmf-resources/", "supports": [], "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。", "origin_class": "SOURCE_PACKET_REFERENCE", "source_or_experiment_ids": [ "SRC-EA-120-URL-AC757EE4E5DE" ], "supporting_locators": [ "EVIDENCE TABLE", "- source class: official framework; exact title: AI Risk Management Framework; author/org: NIST AI Resource Center; canonical URL: https://airc.nist.gov/airmf-resources/" ], "scope": "EVIDENCE TABLE", "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED" }, { "id": "EA-120-R11-RESEARCH", "evidence_class": "RESEARCH", "title": "EA-120 監査済みresearch / canonical revision binding", "supports": [ "EU AI Act Article 14は「高リスクAI」に対して、自然人による有効な監督、能力/限界の理解、automation biasへの注意、出力のoverride/reverse、safe stopを条文として要求する。Article 13はperformance limitationsとlogs等を instructions に含める。したがって、transaction guardrailとして提案・実行・承認・停止・監査を分離する設計は条文の方向性と整合する。しかし、台帳の「transaction/high-impact action」は企業運用上の分類であり、全発注・契約・支払・削除・権限変更がEU法上同じ高リスク分類になることは、この条文だけでは確立されない。NISTは任意利用であり法的義務ではない。" ], "limit": "canonical監査・revision bindingの存在を示す。外部ソースcurrentnessが本文またはcontrol-planeで確定していない場合は、currentnessをUNKNOWNのまま保持する。", "origin_class": "AUDITED_CANONICAL_RESEARCH_PACKET", "source_or_experiment_ids": [ "COMM-042-EA0120" ], "supporting_locators": [ "COMM-042-EA0120", "EA-120-R5-LEGACY-MIGRATION-20261008-R1", "content/staging/EA-120.md" ], "scope": "監査済みEA本文・canonical revision・既存Source Graph relationの範囲。欠損currentnessは推測で閉じない。", "provenance_status": "AUDIT_PASS_CANONICAL_BINDING" }, { "id": "EA-120-R11-WEB-READBACK", "evidence_class": "IMPL", "title": "EA-120 Web body identity / canonical readback", "supports": [ "canonical staging bodyのSHA-256一致とR9 canonical ledger readbackをProduction projectionの入力として検証する。" ], "limit": "body identity/readbackは本文claim自体の真偽や外部ソースの最新性を追加保証しない。", "checked_at": null, "origin_class": "IMPLEMENTATION_READBACK", "source_or_experiment_ids": [ "WEBBODY-EA0120-R8-F02795EE" ], "supporting_locators": [ "WEBBODY-EA0120-R8-F02795EE", "content/staging/EA-120.md", "EA-120-R5-LEGACY-MIGRATION-20261008-R1" ], "scope": "R9/R10 canonical readback後のProduction生成時body identity。", "provenance_status": "CANONICAL_READBACK_BODY_HASH_MATCH" } ], "research_sections": [ { "heading": "WHY_THIS_MATTERS_TO_UPDATE", "text": "発注、契約、支払、削除、権限変更は不可逆性・金銭・権利影響を伴う。AIの提案能力と、実行権限・人間監督・停止可能性を別に設計する必要がある。" }, { "heading": "SCOPE_ROUTING", "text": "governance / Enterprise AI Core / organization overlay / security / audit / legal-regulatory" }, { "heading": "CLAIM_OR_RESEARCH_QUESTION", "text": "EU AI Actの高リスクAIに対するhuman oversight、停止・override・automation bias対策は何を要求するか。それを一般企業の全transactionへ直接適用できるか。" }, { "heading": "EVIDENCE TABLE", "text": "- source class: official legislation / consolidated text; exact title: Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act); author/org: European Union, EUR-Lex; canonical URL: https://eur-lex.europa.eu/eli/reg/2024/1689/oj; publication/update/access: current consolidated text shown 2026-07-27 / accessed 2026-09-13 JST; version/release/tag/commit/API revision/model ID: Regulation (EU) 2024/1689, current consolidated version; supporting locator: Article 14 lines 1270-1285（effective human oversight、理解・automation bias、interpretation、disregard/override/reverse、safe stop、特定biometric matchの二人確認）; Article 13 lines 1250-1269（capabilities/limitations、metrics、human oversight、logs）; evidence label: VERIFIED_SPEC + PRODUCT_VOLATILE; relation: support / limit.\n- source class: official framework; exact title: AI Risk Management Framework; author/org: NIST AI Resource Center; canonical URL: https://airc.nist.gov/airmf-resources/; publication/update/access: AI RMF 1.0, revised version in progress / accessed 2026-09-13 JST; version/release/tag/commit/API revision/model ID: AI RMF 1.0; supporting locator: lines 32-35（voluntary use） and 58-63（Govern/Map/Measure/Manage、context/risk tolerance/resources Profiles）; evidence label: VERIFIED_SPEC + PRODUCT_VOLATILE; relation: context / limit." }, { "heading": "FINDINGS", "text": "EU AI Act Article 14は「高リスクAI」に対して、自然人による有効な監督、能力/限界の理解、automation biasへの注意、出力のoverride/reverse、safe stopを条文として要求する。Article 13はperformance limitationsとlogs等を instructions に含める。したがって、transaction guardrailとして提案・実行・承認・停止・監査を分離する設計は条文の方向性と整合する。しかし、台帳の「transaction/high-impact action」は企業運用上の分類であり、全発注・契約・支払・削除・権限変更がEU法上同じ高リスク分類になることは、この条文だけでは確立されない。NISTは任意利用であり法的義務ではない。" }, { "heading": "LIMITS / COUNTEREVIDENCE / FAILURE ENVELOPE", "text": "法域・用途・system classification・provider/deployer役割で義務が変わる。human-in-the-loopが形式的承認ボタンだけならrisk reductionを証明しない。stop buttonが存在しても既に送信/支払/削除された外部副作用を巻き戻せるとは限らない。" }, { "heading": "AVAILABILITY_GATES", "text": "法域、AI system classification、provider/deployer status、用途・影響、権限/IAM、transaction API、二重承認、limits、実行前diff、監査ログ、kill switch、rollback/compensation手段を確認する。認証済み決済・契約・削除・権限変更試験は未実施。" }, { "heading": "IMPLEMENTATION_STATE", "text": "default-deny capability、dry-run/proposal、risk tier、small limit、two-person or qualified approval、idempotency key、pre/post state、safe stop、reconcileを設計候補とする。実装・法務レビュー・実取引試験未実施。" }, { "heading": "BENCHMARK_OR_EVAL", "text": "synthetic transaction fixtureでamount/recipient/scope、policy classification、approval bypass、duplicate/retry、partial failure、cancel/rollback、audit completenessを測る。人間承認時間とfalse approvalを別計測する。" }, { "heading": "SECURITY / PRIVACY / AUDIT / COST / OPERABILITY", "text": "SECURITY/PRIVACY: least privilege、token scope、no production secret/payment data。AUDIT: proposed action、policy version、approver(s)、diff、idempotency、provider response、reconciliation。COST: approval/reconcile/human review、failed action。OPERABILITY: circuit breaker、rate/amount limit、dead-letter queue、manual recovery。" }, { "heading": "SAFE_WORDING_FOR_FUTURE_BOOK", "text": "「EU AI Act Article 14は高リスクAIのhuman oversightとして、能力・限界の理解、automation biasへの注意、override/reverse、safe stop等を規定する。企業の全transactionを自動的に同一の高リスク分類へ置く根拠ではなく、実運用では法域・用途・権限・不可逆性を別途分類する。」" }, { "heading": "UPDATE_WORK_HANDOFF", "text": "本文改訂では action type、reversibility、financial/rights impact、agent capability、approval、stop、rollback、reconcile、audit evidenceを横並びにする。EU AI Actの適用条文・ガイダンス更新と、対象国法務レビューを次回確認する。" }, { "heading": "OPEN_UNKNOWN", "text": "具体的な企業actionの法的分類、各provider/APIのtransaction approval/rollback、human oversightの有効性、二重承認の必要条件、実際のincident/near-miss率、地域差。" }, { "heading": "STOP_CONDITION", "text": "高リスクというラベルだけで法的結論を出さない。承認ボタン・API成功・ログ存在を、損害防止・可逆性・法的適合の証拠としない。\nUNIT_CLOSE_STATUS: INDIVIDUAL_BOUNDED_CLOSE / EVIDENCE_RECORDED / UNKNOWN_PRESERVED\n\n---" } ], "human_url": "/tools/ea-120-transaction-high-impact-action-guardrails", "markdown_url": "/agent/article.md?path=%2Ftools%2Fea-120-transaction-high-impact-action-guardrails", "json_url": "/agent/article.json?path=%2Ftools%2Fea-120-transaction-high-impact-action-guardrails" }