Baseline · High-risk action gating
G-01 A high-risk action list is defined
highmanual review
Why it matters
Clearly what counts as high-risk: pay/send/delete/exfiltrate.
How to test
Check for a defined list of high-risk actions.
How to fix
List and tag all high-risk actions.