Energy, Utilities & Environment AI Agents,
Monitored for Reliability

1. Target

   Grid topology, SCADA references, substation coordinates and asset registers under NERC CIP and SOCI classification

2. Trigger

   Output or tool call would carry security-classified infrastructure detail to any channel

3. Action — enforced

   Platform blocks the response, strips the classified span, and reports the attempt to the security operations centre

4. Human override

   None — cannot be overridden in session

Logged evidenceResponse id · classification tags · blocked span hash · SOC ticket id · timestamp

1. Target

   Customer messages, meter data fields and telemetry streams ingested by service and grid agents

2. Trigger

   Directive-shaped content detected in inbound customer or AMI data during parsing

3. Action — enforced

   Platform neutralizes the content, quarantines the record, and continues from trusted operational sources only

4. Human override

   None — cannot be overridden in session

Logged evidenceRecord hash · detection pattern · quarantine id · parser version · timestamp

1. Target

   Every agent write path into SCADA, DERMS, switching and plant control systems

2. Trigger

   Agent proposes a state change to operational technology, whatever the stated confidence

3. Action — enforced

   Platform holds the command, requires a named operator commit per NERC CIP and CISA guidance, and executes only least-privilege actions

4. Human override

   Control-room operator — commit via two-person console confirmation

Logged evidenceCommand id · asset id · operator identities · permission scope · commit timestamp

1. Target

   Reports of downed lines, gas odours, water contamination and shock incidents in any channel

2. Trigger

   Hazard classifier matches a life-safety pattern in customer contact, any language

3. Action — enforced

   Platform stops the dialogue, issues the emergency-pathway script, and pages the emergency desk immediately

4. Human override

   Emergency operations supervisor — stand down after confirmed false alarm logged

Logged evidenceContact id · hazard class · script version · page id · language · timestamp

1. Target

   Disconnection, restriction and collections workflows across billing and field-work order systems

2. Trigger

   Action targets a premise with life-support registration or an open hardship protection

3. Action — enforced

   Platform blocks the order, preserves supply, and routes the account to the hardship team

4. Human override

   Hardship team manager — proceed only after regulator-compliant checklist completion

Logged evidenceAccount id · premise flag state · blocked order id · routing record · timestamp

1. Target

   Autonomous bidding and trading agents operating in wholesale energy and ancillary-service markets

2. Trigger

   Order pattern resembles spoofing, layering or coordination, or bypasses the screening service

3. Action — enforced

   Platform blocks submission, cancels resting orders under REMIT and FERC anti-manipulation rules, and alerts compliance

4. Human override

   Market compliance officer — release after documented conduct review

Logged evidenceOrder ids · screen verdict · strategy version · cancellation record · compliance alert id · timestamp

1. Target

   Emissions, discharge and waste numbers destined for compliance reports and permits

2. Trigger

   Figure cannot be traced to reconciled sensor or ledger sources, or monitoring drift is unresolved

3. Action — enforced

   Platform holds the filing, attaches the reconciliation gap, and requires environmental-team sign-off before release

4. Human override

   Environmental compliance manager — sign off in the reporting system of record

Logged evidenceFigure · source ids · reconciliation diff · drift status · signer identity · timestamp

1. Target

   Field-crew switching, isolation and permit-to-work instructions in every crew-facing channel

2. Trigger

   Instruction text not sourced verbatim from the authorized switching-program system

3. Action — enforced

   Platform refuses to compose the steps and serves only the issued switching program by reference

4. Human override

   Switching coordinator — issue a new program through the authorized system

Logged evidenceRequest id · program reference · refusal code · coordinator id · timestamp

1. Target

   Wildfire mitigation ranking and public-safety power-shutoff scoping recommendations

2. Trigger

   Model proposes shutoff scope or mitigation priority without operator concurrence recorded

3. Action — enforced

   Platform labels output advisory-only, blocks downstream execution, and requires documented operator concurrence to proceed

4. Human override

   Wildfire operations commander — concurrence recorded in the event log

Logged evidenceRecommendation id · model version · inputs snapshot · concurrence record · timestamp

1. Target

   Customer payment channels and staff-facing requests for account or banking changes

2. Trigger

   Voice or chat contact requests payment redirection or urgent transfer, cloned-voice risk unresolved

3. Action — enforced

   Platform refuses in-channel change, forces verification through the authenticated portal, and alerts fraud operations

4. Human override

   Fraud operations lead — approve after callback to the number on file

Logged evidenceContact id · request summary · verification path · fraud alert id · timestamp