agent,owner,eu_tier,issue_id,title,severity,urgency,controls,findings,status,assignee,decided_by,decided_at,changes,scan_time,open_days
Research Assistant,platform-team,minimal,c0827a64ee10,Research Assistant can be steered by untrusted content,critical,today,ASI01 Art.15 LLM01 LLM02,31,pending_review,,,,Manual change retrieved_doc content followed by Mail.Send | Enable guardrail prompt_shield | Enable guardrail indirect_attack,2026-10-10T03:12:11.067000,0
Ticket Triage,platform-team,minimal,62380e51c61c,Ticket Triage showed runaway behaviour,high,week,ASI08 Art.15 LLM10,36,pending_review,,,,Manual change Tool loop on lookup_ticket | Manual change Token spike,2026-10-10T03:12:11.067000,0
Sales Orchestrator,,limited,f960d714a780,Sales Orchestrator has more access than it uses,high,today,ASI03 ASI07 Art.15,32,pending_review,,,,Manual change Connected agent Finance Reporter has more privileges | Manual change Privilege hop via Finance Reporter on 2026-10-10 | Manual change Privilege hop via Finance Reporter on 2026-10-09 | Manual change Privilege hop via Finance Reporter on 2026-10-08 | Manual change Privilege hop via Finance Reporter on 2026-10-07 | Manual change Privilege hop via Finance Reporter on 2026-10-06 | Manual change Privilege hop via Finance Reporter on 2026-10-05 | Manual change Privilege hop via Finance Reporter on 2026-10-04 | Manual change Privilege hop via Finance Reporter on 2026-10-03 | Manual change Privilege hop via Finance Reporter on 2026-10-02 | Manual change Privilege hop via Finance Reporter on 2026-10-01 | Manual change Privilege hop via Finance Reporter on 2026-09-30 | Manual change Privilege hop via Finance Reporter on 2026-09-29 | Manual change Privilege hop via Finance Reporter on 2026-09-28 | Manual change Privilege hop via Finance Reporter on 2026-09-27 | Manual change Privilege hop via Finance Reporter on 2026-09-26 | Manual change Privilege hop via Finance Reporter on 2026-09-25 | Manual change Privilege hop via Finance Reporter on 2026-09-24 | Manual change Privilege hop via Finance Reporter on 2026-09-23 | Manual change Privilege hop via Finance Reporter on 2026-09-22 | Manual change Privilege hop via Finance Reporter on 2026-09-21 | Manual change Privilege hop via Finance Reporter on 2026-09-20 | Manual change Privilege hop via Finance Reporter on 2026-09-19 | Manual change Privilege hop via Finance Reporter on 2026-09-18 | Manual change Privilege hop via Finance Reporter on 2026-09-17 | Manual change Privilege hop via Finance Reporter on 2026-09-16 | Manual change Privilege hop via Finance Reporter on 2026-09-15 | Manual change Privilege hop via Finance Reporter on 2026-09-14 | Manual change Privilege hop via Finance Reporter on 2026-09-13 | Manual change Privilege hop via Finance Reporter on 2026-09-12 | Manual change Privilege hop via Finance Reporter on 2026-09-11 | Manual change Privilege hop via Finance Reporter on 2026-09-10,2026-10-10T03:12:11.067000,0
Dev Helper,platform-team,minimal,c8dc786b1299,Dev Helper can run unvetted code or tools,high,today,ASI04 Art.15 LLM03,34,pending_review,,,,Manual change Unpinned MCP server github | Manual change New MCP tool github.run_workflow_shell,2026-10-10T03:12:11.067000,0
Wellbeing Monitor,platform-team,prohibited,864159ca6fd9,Wellbeing Monitor is a regulated AI system,critical,today,Art.5,1,applied,,Natasja,2026-10-09T22:05:28.126000,Manual change Prohibited AI practice (Art. 5),2026-10-10T03:12:11.067000,0
Data Analyst,platform-team,minimal,d854408f44f6,Data Analyst can run unvetted code or tools,high,today,ASI05 Art.15 LLM02,18,pending_review,,,,Manual change Code interpreter identity can read secrets | Manual change Code executed and used sensitive permissions | Manual change Code interpreter enabled,2026-10-10T03:12:11.067000,0
Finance Reporter,platform-team,minimal,2e5c65513bb3,Finance Reporter is not properly authenticated,critical,today,ASI01 LLM01,1,pending_review,,,,Manual change Steered by untrusted content: SQL DB Reader,2026-10-10T03:12:11.067000,0
CV Screener,,high_risk,dc2fbd5106c8,CV Screener does not tell users it is an AI,high,today,ASI09 Art.50,1,pending_review,,,,Manual change No AI disclosure to users,2026-10-10T03:12:11.067000,0
CV Screener,,high_risk,d72e56412ffd,CV Screener acts without human oversight,high,today,ASI02 ASI09 Art.14 LLM06,1,pending_review,,,,Add human approval Office 365 Outlook,2026-10-10T03:12:11.067000,0
HR Helpdesk,,limited,7c618c14d34b,HR Helpdesk has more access than it uses,high,today,ASI03 Art.15 LLM06,4,pending_review,,,,Replace broad permission Calendars.ReadWrite.All | Replace broad permission Files.ReadWrite.All | Revoke permission Files.ReadWrite.All | Revoke permission Calendars.ReadWrite.All,2026-10-10T03:12:11.067000,0
Sales Orchestrator,,limited,33b71d2c0ac4,Sales Orchestrator does not tell users it is an AI,high,week,Art.50,1,pending_review,,,,Manual change No AI disclosure to users,2026-10-10T03:12:11.067000,0
HR Helpdesk,,limited,e13ec373c9a1,HR Helpdesk does not tell users it is an AI,high,week,Art.50,1,pending_review,,,,Manual change No AI disclosure to users,2026-10-10T03:12:11.067000,0
IT Knowledge Base,,limited,a8d768ac4917,IT Knowledge Base does not tell users it is an AI,high,week,Art.50,1,pending_review,,,,Manual change No AI disclosure to users,2026-10-10T03:12:11.067000,0
Meeting Scheduler,,limited,fb8bde5c56a8,Meeting Scheduler does not tell users it is an AI,high,week,Art.50,1,pending_review,,,,Manual change No AI disclosure to users,2026-10-10T03:12:11.067000,0
Policy Q&A,,limited,4ab1b6da9202,Policy Q&A does not tell users it is an AI,high,week,Art.50,1,pending_review,,,,Manual change No AI disclosure to users,2026-10-10T03:12:11.067000,0
Meeting Scheduler,,limited,5237640abe8b,Meeting Scheduler has more access than it uses,high,today,ASI03 Art.12 Art.15,1,pending_review,,,,Manual change Used ungranted Mail.Send,2026-10-10T03:12:11.067000,0
Cloud Ops Assistant,platform-team,minimal,26ac6ce67ae8,Cloud Ops Assistant has more access than it uses,high,today,ASI03 Art.15 LLM06,3,pending_review,,,,Replace broad permission Contributor | Revoke permission Contributor,2026-10-10T03:12:11.067000,0
Inbox Summarizer,platform-team,minimal,4f3621d51944,Inbox Summarizer has more access than it uses,high,today,ASI03 Art.15 LLM06,2,pending_review,,,,Replace broad permission Mail.ReadWrite.All | Revoke permission Mail.ReadWrite.All,2026-10-10T03:12:11.067000,0
Data Analyst,platform-team,minimal,d800cc89669e,Data Analyst has more access than it uses,high,today,ASI03 Art.15 LLM06,1,pending_review,,,,Revoke permission Key Vault Secrets User,2026-10-10T03:12:11.067000,0
CV Screener,,high_risk,65c048f20390,CV Screener lacks the risk and bias controls the EU AI Act requires,medium,week,Art.10 Art.9,2,pending_review,,,,Manual change No evidence of a risk management system | Manual change No evidence of bias evaluation,2026-10-10T03:12:11.067000,0
CV Screener,,high_risk,710bb309897e,CV Screener is a regulated AI system,medium,week,Art.6,1,pending_review,,,,Manual change High-risk AI system (employment),2026-10-10T03:12:11.067000,0
Sales Orchestrator,,limited,f1b976718798,Sales Orchestrator acts without human oversight,medium,week,Art.14,1,pending_review,,,,Add human approval Microsoft Teams,2026-10-10T03:12:11.067000,0
Meeting Scheduler,,limited,8c9ae308c44a,Meeting Scheduler acts without human oversight,medium,week,Art.14,1,pending_review,,,,Add human approval Office 365 Outlook,2026-10-10T03:12:11.067000,0
Ticket Triage,platform-team,minimal,2f1412f772a5,Ticket Triage acts without human oversight,medium,week,Art.14,1,pending_review,,,,Add human approval post_channel,2026-10-10T03:12:11.067000,0
Finance Reporter,platform-team,minimal,ee68eda249bf,Finance Reporter acts without human oversight,medium,week,Art.14,1,pending_review,,,,Add human approval export_report,2026-10-10T03:12:11.067000,0
Data Analyst,platform-team,minimal,b02e846008fb,Data Analyst acts without human oversight,medium,week,Art.14,1,pending_review,,,,Add human approval code_interpreter,2026-10-10T03:12:11.067000,0
Cloud Ops Assistant,platform-team,minimal,c0f103cd1b89,Cloud Ops Assistant acts without human oversight,medium,week,Art.14,1,pending_review,,,,Add human approval restart_vm,2026-10-10T03:12:11.067000,0
Research Assistant,platform-team,minimal,38c74ab978dd,Research Assistant acts without human oversight,medium,week,Art.14,1,pending_review,,,,Add human approval send_mail,2026-10-10T03:12:11.067000,0
Doc Translator,platform-team,minimal,e58c3960e14b,Doc Translator acts without human oversight,medium,week,Art.14,1,pending_review,,,,Add human approval write_doc,2026-10-10T03:12:11.067000,0
Research Assistant,platform-team,minimal,0c0b915022ef,Research Assistant is not properly authenticated,medium,week,Art.15 LLM01,1,pending_review,,,,Manual change Non-compliant: Azure OpenAI deployments must use a custom RAI policy with prompt shields,2026-10-10T03:12:11.067000,0
Market News,platform-team,minimal,,No open issues,,,,0,,,,,,2026-10-10T03:12:11.067000,