RSK-4322 · Change control
Prompt pack changes deployed without compliance review
Two prompt-pack releases bypassed the compliance gate through a direct pipeline trigger.
medium
Exposure score
9/25
likelihood 3 × impact 3
Remediation SLA
15 days
detected 2026-07-11 15:33
Accountable owner
Bancassurance
named under the AI risk charter
Affected agent
Insurance Cross-sell Copilot
AGT-1084 · Bancassurance
Investigation
What the sweep found and how it was corroborated
Two prompt-pack releases bypassed the compliance gate through a direct pipeline trigger.
Releases
2
Gate skipped
compliance
Rollback
1
Exposure position
Placed at likelihood 3, impact 3 on the enterprise 5×5 matrix.
Remediation plan
Tracked to closure
- Enforce protected branch on prompt repo
- Require CR ticket for deploy
Case metadata
- Risk ID
- RSK-4322
- Category
- Change control
- Detected
- 2026-07-11 15:33
- Owner
- Bancassurance
- SLA
- 15 days
- Agent record
- AGT-1084