Run operational reviews

This is an operator procedure. It does not ask an Agent to grant itself authority or modify its own Guardrails.

Monthly access review

1. Export the current principal, role, AccessGrant, Credential-reference, and external identity mapping inventory from the authorized administration surfaces.
2. Confirm every entry has a business owner and current purpose.
3. Remove stale access through its governed administration flow.
4. Require a different in-business reviewer; self-review is rejected.
5. Retain the review decision and evidence according to your retention policy.

Evidence: packages/authz/src/recertification.test.ts

Retention review

1. Confirm every audit category has an approved retention period.
2. Review active legal holds before selecting eligible records.
3. Test export verification before deletion.
4. Record erase authorization, key destruction, tombstone, and verification result.

Evidence: packages/audit/src/retention.test.ts

Daily operational review

Review readiness, authorization denials, incident groups, queue age, waiting Runs, ambiguous effects, audit sealing, and backup age. Treat unavailable correctness-critical storage as not ready; optional telemetry failure is degraded and must not corrupt accepted work.

Evidence: packages/observability/src/resilience.test.ts