RiskMandate — which Agent Behaviour Policy next?
The applications and business functions people have asked an Agent Behaviour Policy for, and a form to suggest or vote for the next one.
Source: https://riskmandate.ai/agent-behaviour-policy-next.html↗
Which Agent Behaviour Policy next?
An Agent Behaviour Policy is built from a measured or documented grant, never typed. These are the applications and business functions people have asked for. Each becomes a vault once its vendor pages have been read and quoted, or once one product's grant is documented for the function. Voting is coming; for now, the form at the bottom reaches us directly.
By target application, and what each one waits for.
The connector shapes below become policies the way the five connector examples were: the connector's own scope or permission page read and quoted on a date, a row per capability the scopes permit, the contradictions between what is advertised and what is granted published unresolved, and the open questions handed to whoever researches next.
Claude's Calendar & Drive connectors
Google Calendar and Google Drive, the two Google Workspace connectors not yet in the directory — Gmail's own is.
An assistant connected to Slack
Channels are mostly other people's writing, and a bot token reaches every channel it is in.
An assistant connected to GitHub
A fine-grained token can be scoped to a repository; an OAuth app cannot, and most connectors are OAuth apps.
An assistant connected to Notion
An integration is added page by page, which is the one connector model with a floor. Whether the assistant's connector uses it is the question.
An assistant connected to Salesforce
A CRM is entirely third-party material by construction.
What the agent is for, not what it runs on.
A different axis: a policy for the CRM, the service desk or the finance data, whichever product holds it. The mandate is the same across products; the grant is per product; the policy is built once one product's grant is documented for the function.
Access to the CRM
Customer records are third-party material by construction. Salesforce, HubSpot, Dynamics.
The customer-service desk
Tickets, and the conversations inside them. Zendesk, Intercom, Freshdesk.
Finance data
Spreadsheets, ledgers and the exports beside them. Sheets, Excel, NetSuite.
Run something that is not here? Tell us.
The form opens a message in your mail client with what you typed; nothing is stored on this site. Say which application or connector, what it is connected to, and why it matters to you. If your agent already holds the credential, every vault carries MAP-A-GRANT.md: give it to the agent and it measures its own grant and drafts the first policy — send us what it finds and the policy gets a tile.
The 16 we have are on the library page.
Each one read live from its vault, with its scenarios, its open questions and the files you hand the agent.