Who Can Undo the Agent? Redressability as a First-Class Safety Property for Tool-Using AI Agents
Tool-using AI agents increasingly act inside institutional workflows by updating records, sending notices, changing account status, scheduling services, and triggering review processes. Existing agent-safety evaluations largely ask whether agents avoid harmful actions. Deployed institutions must also determine whether...