Appendix H - Executor SLA Mapping Templates
Two instruments for mapping executors to consequence tiers and signal-to-decision SLAs. Use the tier assignment worksheet to evaluate each executor individually — the four consequence questions produce a defensible tier assignment. Use the executor SLA register as the organizational inventory: the complete map of all executors, their tiers, loop types, SLAs, and current review status.
Both instruments feed directly into the authority grant record (Appendix D) and the ownership register. The tier assigned in this appendix is the tier recorded in the authority grant record. The SLA register in this appendix is the operational version of the ownership register's loop governance columns.
Part 1 — Consequence Tier Reference
Quick reference summary of the three tiers. Use this alongside the assignment worksheet and record the assigned tier in the authority grant record.
| Tier | Level | SLA | Cadence | Standby | SLA breach |
|---|---|---|---|---|---|
| T1 — Critical | ≤ 4 hours | On-call continuous | Named backup + escalation chain in authority grant | Immediate escalation to CTO. Logged in Appx F same day. | |
| T2 — Significant | ≤ 48 hours | Weekly + direct notify on breach | Responsive within 1 business day. No continuous on-call. | Escalation to governance lead within 24 hrs. Logged in Appx F. | |
| T3 — Standard | ≤ 7 days | Weekly monitoring session | None. Reviews at scheduled weekly session. | Flagged at monthly governance session. Logged in Appx F. |
Part 2 — Tier Assignment Worksheet
Complete for each executor at ACG review. Answer all four consequence questions. The tier is determined by the most severe answer across all four questions — if any answer matches Tier 1, the executor is Tier 1. If the highest answer is Tier 2, the executor is Tier 2.
EXECUTOR BEING ASSESSED
| Executor name | [Name and version] |
|---|---|
| Executor type | Automation / AI agent / Vendor execution dependency |
| Execution mode | Human-assisted / System-led / Fully automated |
| ACG review ref. | [Reference number] |
FOUR CONSEQUENCE QUESTIONS — ANSWER EACH, CIRCLE THE TIER THAT MATCHES
| CONSEQUENCE QUESTION | T1 — Critical | T2 — Significant | T3 — Standard |
|---|---|---|---|
| Q1 — Impact scope Who is affected when this executor makes an incorrect decision? | External customers, regulators, or third parties at scale. Incorrect decision cannot be reversed before harm. | Business operations or customers at meaningful volume. Impact delayed or reversible within hours to days. | Internal operations or low-volume processes. Impact contained and easily reversed. |
| Q2 — Decision volume How many consequential decisions does this executor make per day? | Hundreds to millions. Volume means errors compound before detection. | Tens to hundreds. Volume is meaningful but allows detection before widespread harm. | Single-digit to tens. Low volume — individual errors identifiable quickly. |
| Q3 — Reversibility If this executor produces an incorrect output, how quickly can it be corrected? | Cannot be reversed or correction is complex, costly, or requires external parties (regulators, customers). | Correctable within hours to days with internal action. Some cost or effort involved. | Easily corrected. Internal action only. Low cost. No external parties. |
| Q4 — Regulatory or reputational exposure Does an error from this executor create regulatory, legal, or significant reputational risk? | Yes — direct regulatory obligation, legal liability, or material reputational consequence. | Possible indirect exposure. Governance failure could escalate to regulatory or reputational issue. | No regulatory or reputational exposure. Operational inconvenience only. |
TIER DETERMINATION AND SLA COMMITMENT
| Assigned tier | T1 / T2 / T3 — determined by most severe answer above |
|---|---|
| Signal-to-decision SLA | T1: ≤ 4 hours | T2: ≤ 48 hours | T3: ≤ 7 days |
| Loop type | T1: Automated + blended (on-call) | T2: Blended | T3: Blended or automated + blended review |
| Governance owner | [Named person — must confirm SLA commitment in writing] |
| Backup owner (T1 only) | [Named person — required for T1. Leave blank for T2/T3] |
| Escalation chain (T1 only) | [Documented path: governance owner → backup → CTO — required for T1] |
| Standby structure confirmed | Yes / No — if No, tier assignment cannot proceed |
| Rationale | [Brief statement of why this tier was assigned, referencing the Q1–Q4 answers] |
Part 3 — Executor SLA Register
The organizational inventory of all executors with their tier, SLA, loop type, named interpreter, and current review status. Maintained by the ACG. Reviewed at every quarterly governance session. Any executor whose last review date exceeds its tier SLA is flagged Red — the governance owner is assigned a correction deadline in-session.
| Executor name | Mode | Loop type | Tier | SLA | Gov. owner | Interpreter | Last review | Status |
|---|---|---|---|---|---|---|---|---|
| [Executor 1 — name and version] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
| [Executor 2] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
| [Executor 3] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
| [Executor 4] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
| [Executor 5] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |