RISK-AI-001
An agent issues a refund outside policy
High
A finance agent refunds a charge above its autonomous ceiling without the approval the policy requires, or repeats a refund already issued.
- Status
- assessed
- Category
- unauthorized-action
- Owner
- cfo@arctransformationgroup.com
- Treatment
- mitigate
- Inherent
- High impact 4 × likelihood 3 = 12
- Residual
- Low impact 4 × likelihood
1 = 4
reviewed by operations@arctransformationgroup.com on 2026-10-26 09:18:30Z - Reviewer’s rationale
- The approval gate is verified operating by ARC-AI-004 over the current window, and the hard ceiling cannot be lifted by an approval.
- Review due
- not set
Controls addressing this risk
Scope
stripe.refund