Minimization and retention
Send only what is necessary and document how long it is kept.
Privacy
Responsible use
Safety and regulation by design.
Risk, data and external effects must be defined before adding autonomy.
01
Essential controls
Protection depends on the context of use.
Permissions and confirmation
Limits tools and requires approval for sensitive effects.
AgentsProportional verification
Review and evidence increase as the impact of the error grows.
Risk
02
Operational regulatory map
The legal classification depends on the territory and the specific use.
Document the system
Provider, version, data, purpose, managers and users.
GovernanceClassify the risk
Identify affected people and foreseeable consequences.
AssessmentCheck every update
A new model or tool can alter obligations and controls.
Follow-up
03
From the model to the real system
Safety cannot be inferred from a model sheet. It depends on the data, permissions, affected people, connected tools, and ability to stop or reverse actions.
Govern
Define owners, purpose, inventory, acceptance criteria, and incident channels before deployment.
Map
Describe users, data, third parties, foreseeable impacts, and out-of-scope uses.
Measure
Test quality, bias, privacy, instruction injection, and failure recovery with recorded evidence.
Manage
Limit privileges, require confirmation for sensitive actions, monitor changes, and maintain a rollback path.
04
Fuentes primarias y técnicas
Referencias utilizadas para ampliar y revisar esta página.