top of page
NPW Agentic AI Control Catalogue 3.0.0
LC09
Lifecycle & Change Management
Before deployment, the agent must be tested with a poisoned tool description, a tampered MCP server and a poisoned retrieval source, and must execute none of the injected actions.
WHAT IT ADDRESSES:
Supply-chain defences remain untested until a real compromise.
IMPLEMENTED AT:
Agent
This page publishes the control statement only. Other useful information, including verification methods, mapping to common AI governance frameworks, and applicability to your agents, is available through NPW consulting engagements.
Control statements of the NPW Agentic AI Control Catalogue 3.0.0 © 2026 New Pacific Way Ltd. are licensed under CC BY-SA 4.0. You may share and adapt them with attribution, under the same licence.
bottom of page