# AI Agent Production-Readiness Review

Use this worksheet to record the evidence for one agent, one version and one production scope. A checked box means the evidence has been inspected—not merely promised.

## Review identity

- Agent and version:
- Workflow and business owner:
- Technical steward:
- Review date:
- Intended users:
- Initial production scope and volume:
- Decision: Approve for limited production / Approve with conditions / Rework / Reject or simplify

## Gate 1 — Defined job

- [ ] One primary outcome and acceptance criteria
- [ ] Trigger, authorised inputs and completion state
- [ ] Named users, approver and accountable owner
- [ ] Explicit non-goals and prohibited tasks
- [ ] Workflow map includes exceptions and human steps
- Evidence inspected:
- Gaps and owner:

## Gate 2 — Controlled authority

- [ ] Action-level tool and permission register
- [ ] Least-privilege identity; read and write powers separated where practical
- [ ] Data classes, minimisation, retention and deletion path
- [ ] Approval rules for sensitive, high-impact or irreversible actions
- [ ] Parameter limits and deterministic business controls
- [ ] Revocation, expiry and emergency stop tested
- Evidence inspected:
- Gaps and owner:

## Gate 3 — Representative evaluation

- [ ] Versioned cases reflect normal production work
- [ ] Edge, missing-data, conflicting-data and failure cases
- [ ] Adversarial and prompt-injection cases where external content is processed
- [ ] Tool selection, arguments, writes and escalation evaluated
- [ ] Rubric and critical thresholds agreed before the run
- [ ] Human review calibrates automated scoring
- [ ] Regression baseline can be rerun after changes
- Evidence inspected:
- Gaps and owner:

## Gate 4 — Observable execution

- [ ] Run ID and component versions
- [ ] State transitions, tool calls, validated arguments and outcomes
- [ ] Approvals, escalations and final business outcome
- [ ] Latency, cost, correction and exception measures
- [ ] Alerts have thresholds, owners and response playbooks
- [ ] Logging minimises and protects sensitive content
- Evidence inspected:
- Gaps and owner:

## Gate 5 — Escalation and recovery

- [ ] Uncertainty, consequence, policy, sensitivity and failure triggers
- [ ] Retry and action limits
- [ ] Decision-ready handoff packet
- [ ] Available human queue and accountable decision owner
- [ ] Idempotent retry, rollback or compensating action for partial work
- [ ] Incident drill, recovery and deactivation path tested
- Evidence inspected:
- Gaps and owner:

## Gate 6 — Operational ownership

- [ ] Workflow owner, technical steward and control owners named
- [ ] Support coverage and incident contacts
- [ ] Dependency and vendor register with contingencies
- [ ] Change classification, regression and approval process
- [ ] User feedback, appeal and correction path
- [ ] Retirement and data-disposition procedure
- Evidence inspected:
- Gaps and owner:

## Gate 7 — Acceptable economics

- [ ] Baseline workflow cost and outcome measures
- [ ] Model, tool, infrastructure and vendor costs at realistic volume
- [ ] Human review, correction, exception and support effort
- [ ] Cost per accepted outcome
- [ ] Capacity limits and peak-volume assumptions
- [ ] Stop, hold and scale thresholds
- Evidence inspected:
- Gaps and owner:

## Decision record

- Critical controls passed:
- Residual risks accepted by:
- Conditions, owner and due date:
- Initial production limits:
- First-day checks:
- First-week review:
- 30-day decision date:
- Material changes that require re-review:

This is an operational review template, not legal, cybersecurity or regulatory advice. Adapt it to the workflow's consequence and applicable obligations.