Revoke the agent’s booking permission and preserve action: What should the operator do first?
Revoke the consequential permission immediately and preserve logs for investigation and response.
The question
A travel-support agent unexpectedly begins rebooking customers onto expensive itineraries without required approval. The company must stop further consequential actions immediately while preserving enough evidence to investigate the failure. What should the operator do first?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Review a sample of completed bookings before changing permissions.Sampling may support diagnosis, but delaying containment allows additional unauthorized consequential actions to occur.
- Ask the vendor whether similar booking behavior occurred elsewhere.Vendor inquiry can inform broader risk analysis, but it does not immediately restrict the local agent or preserve local action evidence.
- Revoke the agent’s booking permission and preserve action logs. ✓Removing the consequential tool permission contains further harm while preserving observable actions needed for investigation and corrective response.
- Add a warning to the system prompt and continue supervised bookings.A prompt warning is not an authorization boundary and may not contain the agent’s existing ability to perform costly bookings.
The trap
For active unauthorized actions, contain the capability first, preserve logs, and investigate using the recorded action trail. How to remember it
Revoke the consequential permission immediately and preserve logs for investigation and response.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Conduct use-specific rights and quality review: Which approval approach best addresses the new use and both →
- Treat retrieved instructions as data: Which design best meets those constraints? →
- Tokenize identifiers: Which approach best satisfies both constraints? →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.