{"axes":[{"crosswalk":{"eu":["Art. 14"],"iso":["A.9.2"],"nist":["MANAGE 2"]},"description":"De mate van zelfstandigheid die de agent verdient. Geen knop die je zet: ze volgt uit de andere, en de lat stijgt met de blast radius.","id":"autonomy","levels":[{"id":"A1","means":"it proposes, a person does the work","name":"Suggestion"},{"id":"A2","means":"it does the work, a person approves before it lands","name":"Approve"},{"id":"A3","means":"it acts, a person watches and can stop it","name":"Oversight"},{"id":"A4","means":"it acts alone within a set boundary, and is checked afterwards","name":"Delegated"},{"id":"A5","means":"it acts alone and sets its own boundary","name":"Autonomous"}],"measure":null,"name":"Autonomie","pillar":"P"},{"crosswalk":{"eu":["Art. 9","Annex III"],"iso":["A.5"],"nist":["MAP 5"]},"description":"Wat er gebeurt als het fout is, en of de wereld terug te zetten is. Twee vragen en niet één: een verkeerde kopregel is publiek en ongedaan te maken, een verzonden mail is onzichtbaar en voorgoed weg.","id":"blast-radius","levels":[{"id":"B1","means":"wrong output stays inside the system that produced it","name":"Contained"},{"id":"B2","means":"it reaches something real, and undoing it restores the world","name":"Recoverable"},{"id":"B3","means":"people outside see it before anyone can undo it","name":"Exposed"},{"id":"B4","means":"a regulator, a contract or a supervisory body is involved","name":"Regulated"},{"id":"B5","means":"no undo exists: money moved, mail sent, data published, safety touched","name":"Irreversible"}],"measure":null,"name":"Blast radius","pillar":"P"},{"crosswalk":{"eu":["Art. 15"],"iso":["A.6.2.4"],"nist":["MEASURE 2"]},"description":"Hoe vaak het goed gaat, en hoe zeker u bent van dat getal. Gemeten als percentage met foutmarge — het implementatiepatroon bepaalt hoe kenbaar die marge is.","id":"reliability","levels":[],"measure":"percentage with its error margin","name":"Betrouwbaarheid","pillar":"P"},{"crosswalk":{"eu":["Art. 9"],"iso":["A.5.2"],"nist":["GOVERN 1.3"]},"description":"Waar de grens getrokken wordt. Een gecontainerde taak heeft misschien 80% betrouwbaarheid nodig; een onomkeerbare 99%+.","id":"governance-thresholds","levels":[],"measure":"the reliability bar per autonomy level, rising with blast radius","name":"Governance-drempels","pillar":"A"},{"crosswalk":{"eu":["Art. 12","Art. 15"],"iso":["A.6.2.6","A.6.2.8"],"nist":["MANAGE 1"]},"description":"De guardrails die er zijn.","id":"infrastructure","levels":[{"id":"I1","means":"nothing recorded, nothing scoped: the agent acts with what it was handed","name":"Open"},{"id":"I2","means":"every action is written down afterwards","name":"Logged"},{"id":"I3","means":"the record is signed, so a stranger can check it was not edited","name":"Verified"},{"id":"I4","means":"a permit decides per action, before it happens, and refuses outside it","name":"Authorized"},{"id":"I5","means":"the credential never reaches the agent: something else performs the act","name":"Contained"}],"measure":null,"name":"Infrastructuur","pillar":"C"},{"crosswalk":{"eu":[],"iso":["A.6.1.2"],"nist":["MAP 1"]},"description":"Waarom het ertoe doet.","id":"business-value","levels":[{"id":"V1","means":"saves effort on work that was already being done","name":"Incremental"},{"id":"V2","means":"changes how a process runs, not only how fast","name":"Operational"},{"id":"V3","means":"changes what the organisation can offer","name":"Strategic"},{"id":"V4","means":"changes what business the organisation is in","name":"Transformative"}],"measure":null,"name":"Bedrijfswaarde","pillar":"P"},{"crosswalk":{"eu":["Art. 12","Art. 15"],"iso":["A.6.2.4"],"nist":["MEASURE 2","MEASURE 3"]},"description":"Kan iets anders dan de agent vaststellen dat het fout was, en snel genoeg om er nog iets aan te doen. Dit is wat een smalle ingreep veilig maakt bij de eerste run, zonder enige staat van dienst, en wat geen staat van dienst kan vervangen als het ontbreekt.","id":"verifiability","levels":[{"id":"K1","means":"nothing can tell whether the output was right","name":"Unchecked"},{"id":"K2","means":"someone looks at a sample now and then","name":"Sampled"},{"id":"K3","means":"a person reviews each output before or after it lands","name":"Reviewed"},{"id":"K4","means":"a check runs on every output, by a path the agent does not control","name":"Checked"},{"id":"K5","means":"that check can prove it wrong, and soon enough to matter","name":"Refutable"}],"measure":null,"name":"Verifieerbaarheid","pillar":"A"}],"crosswalk_frames":{"eu":"EU AI Act, Regulation (EU) 2024/1689 (GDPR where named)","iso":"ISO/IEC 42001:2023, Annex A controls","nist":"NIST AI RMF 1.0, functions and subcategories"},"framework":"PAC","language":"nl","page":"https://trustedagentic.ai/nl/framework/","pillars":[{"answers":"business","id":"P","name":"Potential","question":"Wat is het waard om te bouwen dat blijft?","questions":["P1","P2","P3","P4","P5","P6","P7"]},{"answers":"liability","id":"A","name":"Accountability","question":"Wie is verantwoordelijk, en kunt u het bewijzen?","questions":["A1","A2","A3","A4","A5"]},{"answers":"engineering","id":"C","name":"Control","question":"Kan uw infrastructuur afdwingen wat beleid vereist?","questions":["C1","C2","C3","C4","C5","C6","C7"]}],"questions":[{"crosswalk":{"eu":[],"iso":["A.6.1.2"],"nist":["MAP 1"]},"id":"P1","pillar":"P","text":"Welke beslissingen delegeert u nog niet aan agents, en wat kost u dat?"},{"crosswalk":{"eu":[],"iso":["A.6.2"],"nist":["MANAGE 2"]},"id":"P2","pillar":"P","text":"Maken betere modellen uw huidige setup waardevoller, of overbodig?"},{"crosswalk":{"eu":[],"iso":["A.5"],"nist":["MAP 1"]},"id":"P3","pillar":"P","text":"Hoeveel waarde laat je liggen door te veel in te perken?"},{"crosswalk":{"eu":["Art. 3"],"iso":["A.6.1.2"],"nist":["MAP 1"]},"id":"P4","pillar":"P","text":"Nemen je agents daadwerkelijk beslissingen, of automatiseren ze alleen stappen die mensen al hebben gedefinieerd?"},{"crosswalk":{"eu":["Art. 10"],"iso":["A.7"],"nist":["MAP 2"]},"id":"P5","pillar":"P","text":"Bereikt de juiste context je agents op het juiste moment?"},{"crosswalk":{"eu":[],"iso":["A.10"],"nist":["GOVERN 6"]},"id":"P6","pillar":"P","text":"Bouw je op gevestigde en opkomende standaarden, of op een eiland?"},{"crosswalk":{"eu":["Art. 13","Art. 15"],"iso":["A.6.2.4"],"nist":["MEASURE 2"]},"id":"P7","pillar":"P","text":"Kent u de foutmarge op de betrouwbaarheid van uw agent, of alleen het kopgetal?"},{"crosswalk":{"eu":["Art. 26","Art. 49"],"iso":["A.4.2"],"nist":["GOVERN 1.6"]},"id":"A1","pillar":"A","text":"Kent u elke agent die in uw organisatie draait?"},{"crosswalk":{"eu":["Art. 25","Art. 26"],"iso":["A.3.2"],"nist":["GOVERN 2"]},"id":"A2","pillar":"A","text":"Als een agent schade veroorzaakt, is de aansprakelijkheidsketen dan duidelijk?"},{"crosswalk":{"eu":["Art. 49"],"iso":["A.4.2"],"nist":["GOVERN 1.6"]},"id":"A3","pillar":"A","text":"Kan je infrastructuur voorkomen dat een agent draait zonder geregistreerd te zijn?"},{"crosswalk":{"eu":["Art. 12","Art. 13","Art. 86"],"iso":["A.6.2.8","A.8.2"],"nist":["GOVERN 4"]},"id":"A4","pillar":"A","text":"Zou je aan een toezichthouder kunnen uitleggen wat je agent deed en waarom?"},{"crosswalk":{"eu":["Art. 12","Art. 14"],"iso":["A.6.2.8"],"nist":["MANAGE 2"]},"id":"A5","pillar":"A","text":"Wanneer een agent een ingrijpende beslissing neemt, kun je dan traceren wie het autoriseerde en wat er gebeurde?"},{"crosswalk":{"eu":["Art. 9","Art. 15"],"iso":["A.6.2.6"],"nist":["MANAGE 1"]},"id":"C1","pillar":"C","text":"Worden uw agents begrensd door architectuur, of alleen door beleid?"},{"crosswalk":{"eu":["Art. 25"],"iso":["A.10.2","A.10.3"],"nist":["GOVERN 6"]},"id":"C2","pillar":"C","text":"Wanneer agents delegeren aan andere agents, kan autoriteit dan alleen afnemen?"},{"crosswalk":{"eu":["Art. 14","Art. 26"],"iso":["A.9.2","A.6.2.6"],"nist":["MANAGE 2"]},"id":"C3","pillar":"C","text":"Wat gebeurt er wanneer menselijk toezicht in de praktijk faalt?"},{"crosswalk":{"eu":["Art. 10","GDPR Art. 5","GDPR Art. 25"],"iso":["A.7"],"nist":["MEASURE 2"]},"id":"C4","pillar":"C","text":"Hoe balanceer je agentkwaliteit met dataprivacy?"},{"crosswalk":{"eu":["Art. 15"],"iso":["A.6.2.6"],"nist":["MANAGE 1"]},"id":"C5","pillar":"C","text":"Zijn agents beperkt tot wat ze mogen doen, of alleen geblokkeerd voor wat ze niet mogen?"},{"crosswalk":{"eu":["Art. 25"],"iso":["A.10"],"nist":["GOVERN 6"]},"id":"C6","pillar":"C","text":"Werkt je agentopzet wanneer agents trust boundaries moeten overschrijden?"},{"crosswalk":{"eu":["Art. 9","Art. 72"],"iso":["A.6.2.6"],"nist":["MANAGE 4"]},"id":"C7","pillar":"C","text":"Wat gebeurt er wanneer een agent in een use case belandt die je niet had voorzien?"}],"source":"https://trustedagentic.ai/framework/pac.json","version":"2026-09-14"}