# OWASP: Maturity Level 0 Unaware and Ad Hoc, key enterprise action

> GAMMA-Ray v0.0.155 (beta, for review; every rating is experimental). One line item of State of Agentic AI Security and Governance 2.01 (owasp.k04): its text, its place in the source, the indicators that cite it and the evidence that reaches it.
> Page: https://gamma-ray.sgit.ai/provisions/owasp.k04/ · Source: data/provisions.json


Provision owasp.k04 · State of Agentic AI Security and Governance 2.01 · action

> Issue temporary usage guidelines

The text is as taken from the source. **In the source:** [https://genai.owasp.org/resource/state-of-agentic-ai-security-and-governance/](https://genai.owasp.org/resource/state-of-agentic-ai-security-and-governance/) (the document: its publisher gives no deeper address for this item; linked 2026-11-10). The instrument: [State of Agentic AI Security and Governance 2.01](../../instruments/index.md), CC BY-SA 4.0; read 2026-11-10.

## Who cites it

| Indicator | The fact it asks for | Kind of link | The assertion |
|---|---|---|---|
| [`I34`](../../questions/index.md#I34) | A governance policy for agents is published | part: partly evidenced | Asserted in the mapping by gamma-ray@web-summit.dinis; the written basis is not recorded yet. |
| [`I47`](../../questions/index.md#I47) | A limit on it is a rule in prose | part: partly evidenced | Asserted in the mapping by gamma-ray@web-summit.dinis; the written basis is not recorded yet. |

A link is our assertion, not the instrument's. "Same" carries the evidence to the provision in full. "Part" marks the provision as partly evidenced: the fact is one piece of what it asks. "Negation" points the other way.

## The evidence that reaches it

| Card | Through | This provision is | The evidence | How far to trust it |
|---|---|---|---|---|
| [RiskMandate Publisher](../../spectrum/cards/riskmandate-publisher/index.md) | `I34` | partly evidenced | [Source](https://riskmandate.ai/team/publisher.html) | π Moderate · S1·R5·A1 ×2 |
| [RiskMandate Publisher](../../spectrum/cards/riskmandate-publisher/index.md) | `I47` | partly evidenced | [Source](https://riskmandate.ai/team/publisher.html) | π Moderate · S1·R5·A1 ×2 |
| [The PrompTugal.news agent team](../../spectrum/cards/promptugal-newsroom-team/index.md) | `I34` | partly evidenced | [Source](https://promptugal.news/board/abp/README.md) | π Moderate · S1·R5·A1 ×2 |
| [The PrompTugal.news agent team](../../spectrum/cards/promptugal-newsroom-team/index.md) | `I47` | partly evidenced | [Source](https://promptugal.news/CLAUDE.md) | π Moderate · S1·R5·A1 ×2 |
| [ByTheLaw](../../spectrum/cards/bythelaw-legal-chat/index.md) | `I47` | partly evidenced | "A autorização prevista no número anterior é limitada às operações de" [Source](https://app.bythelaw.com/pt/termos-citius) | π Moderate · S1·R5·A1 ×3 |
| [Hackian](../../spectrum/cards/ethiack-hackian/index.md) | `I47` | partly evidenced | "Guardrails define what the agent must not do." [Source](https://docs.ethiack.com/docs/portal/tests/agentic-pentest-policy-guidelines) | π Moderate · S1·R5·A1 ×3 |
| [Junie](../../spectrum/cards/junie/index.md) | `I47` | partly evidenced | "define personal preferences or organization-wide rules that apply to all your projects" [Source](https://junie.jetbrains.com/docs/guidelines-and-memory.html) | π Moderate · S1·R5·A1 ×3 |
| [Noxus AI Workers](../../spectrum/cards/noxus-ai-workers/index.md) | `I47` | partly evidenced | "Define system guidance and allowed behaviors to steer responses and restrict access" [Source](https://docs.noxus.ai/core/concepts/agents) | π Moderate · S1·R5·A1 ×3 |
| [OutSystems Agent Workbench](../../spectrum/cards/outsystems-agent-workbench/index.md) | `I47` | partly evidenced | "They define the AI's role, behavior, constraints, and overall objective." [Source](https://extranetprdintegrations.outsystems.net/Documentation_API/rest/getContentMarkdown/doc?Guid=24d5a0ea-68c8-4851-b7de-e0908c122862) | π Moderate · S1·R5·A1 ×3 |
| [Replit Agent](../../spectrum/cards/replit-agent/index.md) | `I47` | partly evidenced | "Agent is guided to follow them, but strict requirements aren’t guaranteed." [Source](https://docs.replit.com/features/agent/agent-customization) | π Moderate · S1·R5·A1 ×3 |
| [Spinnable AI employees](../../spectrum/cards/spinnable-ai-employees/index.md) | `I47` | partly evidenced | "Worker Policy instructions are treated as the highest-priority rules and apply across all conversations." [Source](https://docs.spinnable.ai/guides/corporate-email) | π Moderate · S1·R5·A1 ×3 |
| [Talkdesk Autopilot](../../spectrum/cards/talkdesk-autopilot/index.md) | `I47` | partly evidenced | "Escalate to a live agent if the customer mentions a medical emergency" [Source](https://www.talkdesk.com/news-and-press/press-releases/ai-agents-for-voice/) | π Moderate · S1·R5·A1 ×3 |
| [Visor.ai AI agents](../../spectrum/cards/visor-ai-agents/index.md) | `I47` | partly evidenced | "The agents don't give clinical advice" [Source](https://www.visor.ai/healthcare/) | π Moderate · S1·R5·A1 ×3 |

Touched never means complies.

## Answer it directly

A company can answer this line item itself, in its own file at `/.well-known/fact-ray.json`, with the node `gamma-ray:provision/owasp.k04` ([how](../../fact-ray/well-known/index.md)). A company that already assesses itself against OWASP can reuse that work.

[All provisions](../../provisions/index.md)