AI Agent Security (Course)
Separation of Duties
Also: segregation of duties
Splitting a sensitive process across roles so no single person can both perform an action and approve or audit it.
In more detail
In agent governance this means the person who sets or changes policy is not the only person who can review its effects, and the roles that read audit evidence are distinct from those that change settings. A read-only auditor role and a manager role that can read but not export are examples. It limits both abuse and unnoticed mistakes, and it pairs with least privilege in role design.