Gap Analysis

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Require an explicit retention policy for recruiting context before writing to long-term or shared stores. Add customer-facing disclosure/control for retained candidate context and block eval-dataset writes when retention is not justified.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require recovery verification to pass before incident status can be set to resolved. Treat restart success as an intermediate action rather than the customer outcome.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require metric-recovery verification artifact with status 'passed' before allowing incident status to be set to 'resolved'. Block ticket close when health check returns 'unknown'.

Require the agent to apply retrieved policy exceptions before issuing a denial. Add a verification step that confirms all relevant policy exceptions have been checked.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Block long-term/shared retention of sensitive candidate context unless a retention policy, purpose, and candidate-facing control are present.

Escalate to engineering leadership: DevOps agent has a systemic pattern of false incident resolution. Enforce mandatory metric-recovery verification at the workflow level. Promote this cluster to a regression eval.

Escalate to engineering leadership: DevOps agent has a systemic pattern of false incident resolution. Enforce mandatory metric-recovery verification at the workflow level. Promote this cluster to a regression eval.

Escalate to engineering leadership: DevOps agent has a systemic pattern of false incident resolution. Enforce mandatory metric-recovery verification at the workflow level. Promote this cluster to a regression eval.

Escalate to engineering leadership: DevOps agent has a systemic pattern of false incident resolution. Enforce mandatory metric-recovery verification at the workflow level. Promote this cluster to a regression eval.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Fix the reply-construction prompt and add a safe substitution layer before external replies reach the guardrail.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Escalate the incident workflow to enforce metric recovery at the status-update boundary and convert this cluster into a regression eval.

Review agent prompt and output pipeline to prevent customer identifiers from appearing in external reply construction. Add pre-send validation to block identifier inclusion. Escalate recurring pattern to compliance review.

Review agent prompt and output pipeline to prevent customer identifiers from appearing in external reply construction. Add pre-send validation to block identifier inclusion. Escalate recurring pattern to compliance review.

Review agent prompt and output pipeline to prevent customer identifiers from appearing in external reply construction. Add pre-send validation to block identifier inclusion. Escalate recurring pattern to compliance review.

Review agent prompt and output pipeline to prevent customer identifiers from appearing in external reply construction. Add pre-send validation to block identifier inclusion. Escalate recurring pattern to compliance review.

Review agent prompt and output pipeline to prevent customer identifiers from appearing in external reply construction. Add pre-send validation to block identifier inclusion. Escalate recurring pattern to compliance review.

Review agent prompt and output pipeline to prevent customer identifiers from appearing in external reply construction. Add pre-send validation to block identifier inclusion. Escalate recurring pattern to compliance review.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Require the agent to reconcile retrieved account and policy context before closing or denying the customer request. Route exception-qualified cases to a human approval path.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.

Preserve prior customer context, assign an owner or escalation path when repeat contact is detected, and block resolutions that ask the customer to repeat already-provided information.