Govern (GV) · Blast radius

Blast radius at the Domain charter layer

deterministic · Outside the model's reasoning

Who is allowed to put this agent into the world, under what authority, accountable to what policy, with what retirement criteria?

What this cell does

Inherits tier taxonomy, defines which tiers the domain is authorized to operate, defines failure-mode reviews per tier.

Artifacts (1)

checks.yamlview on GitHub

# ABOUTME: Machine-checkable definition of the Charter blast-radius / domain cell.
# ABOUTME: The audit prompts in this cell's README, expressed so a validator can score them.

cell:
  id: blast-radius.client-side
  concern: blast-radius
  layer: client-side
  authority: domain
  document: domain-charter
  owner: "Domain authority."
  question: "Does the domain charter declare which risk tiers the domain is authorized to operate, and which failure-mode reviews are required per tier?"

mappings:
  csf: "GV.RM-02, GV.RR-03"
  ai_rmf: "GOVERN 1.3"
  iso42001: "A.5"
  eu_ai_act: "Art. 9"

checks:
  - id: GV-BR-D-01
    description: "The tiers this domain may operate are enumerated."
    type: min_items
    target: "authorized_risk_tiers:1"
    document: domain-charter
    severity: blocking
    evidence: "A list of integers."
  - id: GV-BR-D-02
    description: "A review requirement is recorded for each tier the domain may operate."
    type: required_field
    target: "tier_review_requirements"
    document: domain-charter
    severity: blocking
    evidence: "A mapping from tier to required review."

Cell notes

Charter, Blast radius / Domain

Structural question. Does the domain charter declare which risk tiers the domain is authorized to operate, and which failure-mode reviews are required per tier?

Owner. Domain authority.

Template fragment

§3 (Authorized risk tiers) and §6 (Failure-mode review) of ../../templates/domain-charter.md.

Audit prompts

- Which tiers does this domain operate? Is the customer-facing domain accidentally permitted Tier 4?
- Are failure-mode reviews actually happening at the cadence declared, or just promised?

Citation

NIST CSF 2.0 GV.RM-03, GV.RM-04. NIST AI RMF GOVERN 1.3. ISO/IEC 42001 §A.6.

Crosswalk

NIST CSF 2 0	GV.RM-03, GV.RM-04
NIST AI RMF	GOVERN 1.3
ISO IEC 42001	§A.6

Cite this cell: https://agenticcovenants.com/govern/blast-radius/client-side/