01 / Source and scope
Who acts, and what changes?
Principal and authority origin
Organization deploying AI agents. Organization governance and assigned human accountability.
Consequential action
Delegate customer-facing or operational decisions.
02 / Action-time control
Make the requested effect testable.
The PDPC model framework is governance guidance, not a universal statutory certification. Document human roles, action limits, escalation and feedback for each autonomous workflow.
OriginOrganization governance and assigned human accountability
RequestDelegate customer-facing or operational decisions
DecisionEvaluate and enforce before effect
03 / Evidence and responsibility
Permission, execution, and outcome are separate.
Governance record, tested limits, decisions and exception review.
ProofGrid can help document decision boundaries; organizations own governance, applicable privacy duties and outcomes.
Primary source