AGENTFORCE-RD-01: Headless Confirmation Bypass (Experience Layer)
🔴 High · Runtime Capability Drift
Detects when high-privilege agent actions (DML, Apex deployment, permission modification, financial transactions) can be invoked through headless Headless 360 endpoints without a deterministic Agent Script transition requiring an Experience Layer approval card.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-RD-01 |
| Severity | High |
| Category | Runtime Capability Drift |
Remediation
Add isConfirmationRequired: true to the GenAiFunction, or update the Agent Script to enforce a mandatory transition block (-> if @variables.isApproved == true) that renders an Experience Layer approval card before execution.