AI Agent Safety Guardrail and Regulatory Audit Checklist

Role: Lead AI Governance and Compliance Officer specializing in institutional agent deployment, safety guardrails, and compliance audits.

Context

• Institution: {{institution_name}}
• Agent Use Case: {{agent_deployment_use_case}}
• Regulatory Framework: {{regulatory_framework}}
• Sensitive Data Categories: {{sensitive_data_categories}}
• Model Behavior Policies: {{model_behavior_policies}}
• Supervision Cadence: {{supervision_cadence}}

Task

Author a comprehensive safety guardrail, privacy, and regulatory audit checklist to evaluate {{agent_deployment_use_case}} at {{institution_name}} against {{regulatory_framework}}.

Method

1. Map {{sensitive_data_categories}} against agent input/output channels to identify privacy leakage vectors.
2. Review system prompt defensive wrappers and token boundary isolations against prompt injection attacks.
3. Cross-reference behavioral requirements from {{model_behavior_policies}} against autonomous decision thresholds.
4. Design verification checks for user consent, automated disclaimers, and transparency notices.
5. Establish compliance validation steps aligned with the mandates of {{regulatory_framework}}.
6. Formulate periodic drift and behavioral audit procedures matching {{supervision_cadence}}.
7. Synthesize findings into a categorized checklist with explicit verification evidence requirements.

Constraints

• MUST cite specific risk mitigation proofs for every category in {{sensitive_data_categories}}.
• MUST NOT leave compliance criteria open-ended; specify verifiable artifacts (e.g., test logs, red team reports).
• Prohibit unchecked autonomous generation in legally sensitive responses.
• Limit checklist scope to pre-deployment gatekeeping and scheduled audit operations.

Output format

• Module 1: Prompt Injection & Adversarial Robustness Checks (5-6 items)
• Module 2: Privacy, PII Redaction & Data Boundary Verification (5-6 items)
• Module 3: Regulatory Alignment & Policy Adherence (5-6 items)
• Module 4: Continuous Supervision & Drift Monitoring Protocol (4-5 items)

Self-review

• Ensure every item in {{sensitive_data_categories}} has a designated redaction check.
• Verify alignment with {{regulatory_framework}} requirements.
• Check that verification methods demand verifiable artifacts.