{ "version": "0.1", "evidenceType": "editorial-question-map", "reviewedOn": "2026-11-05", "coverageVerdict": "undetermined", "scenarios": [ { "id": "own-loss", "title": "The agent makes an authorized but wrong purchase", "lossToDescribe": "Your business incurs its own financial loss, with no customer claim yet.", "discussion": "Ask about own financial loss, performance triggers and the actual definition of a covered event.", "questions": [ "Does the proposed wording cover our own loss, a third-party claim, or both?", "Which failure, KPI or event must be established before the policy can respond?", "How are trading, investment, procurement or other sector-specific activities treated?", "Which deductibles, limits, exclusions and proof requirements apply to this scenario?" ], "evidenceToPrepare": [ "Task and authority record", "Actual loss calculation", "Model, tool and policy versions", "Relevant acceptance or KPI evidence" ] }, { "id": "client-claim", "title": "A customer claims that the agent\u2019s work caused a loss", "lossToDescribe": "A third party alleges loss arising from a service your business delivered.", "discussion": "Ask about AI liability, professional liability or technology E&O wording for the described service.", "questions": [ "Who is the named insured, and is the relevant AI-enabled service within the insured activities?", "What must be alleged or established for the third-party claim to fall within the insuring clause?", "How are contractual promises, indemnities and liability assumed under an agreement treated?", "How are defense costs, settlements, deductibles and applicable limits handled?" ], "evidenceToPrepare": [ "Customer agreement and service scope", "Claim or complaint chronology", "Delivered output and supporting records", "Relevant versions and human interventions" ] }, { "id": "malicious-interference", "title": "An attacker manipulates the agent into sending money", "lossToDescribe": "There is suspected malicious interference as well as a financial consequence.", "discussion": "Ask how cyber, crime, social-engineering and AI-related provisions interact; the tool does not classify the event legally.", "questions": [ "How does each relevant wording define unauthorized activity, fraud and social engineering?", "Does technical use of valid credentials or a signed instruction affect the analysis under that wording?", "Which exclusions, sublimits, consent requirements or overlapping provisions need clarification?", "What incident response, notification and evidence-preservation steps should we follow now?" ], "evidenceToPrepare": [ "Preserved authorization and transaction records", "Incident timeline", "Access and tool records retained securely", "Relevant incident-response communications" ] }, { "id": "output-privacy", "title": "The agent reveals confidential information in its output", "lossToDescribe": "Information may be disclosed through an output without a conventional network intrusion.", "discussion": "Ask about privacy, confidentiality, output-related liability and response-cost provisions.", "questions": [ "Does the wording address a disclosure through model output without a separate security breach?", "Which affected parties and categories of information are within the scope?", "Which response costs, third-party claims or investigations are addressed, if any?", "What confidentiality, notification, retention and jurisdictional requirements should our advisers assess?" ], "evidenceToPrepare": [ "Redacted output reference", "Data-access scope", "Affected-party assessment", "Incident chronology without publishing sensitive data" ] }, { "id": "performance-promise", "title": "The agent misses a promised performance target", "lossToDescribe": "A vendor has made a performance commitment to a customer.", "discussion": "Ask about the performance warranty, contractual obligation and the party entitled to claim.", "questions": [ "What exact metric, population, period and threshold were agreed before inception?", "Who is insured, who holds the warranty, and who can receive a payment?", "How are model changes, data drift, regrading and human assistance handled?", "Which exclusions, dispute process, loss calculation and notification terms govern the promise?" ], "evidenceToPrepare": [ "Agreed metric and contract version", "Dated baseline and subsequent results", "Configuration and change history", "Relevant warranty and policy documents" ] }, { "id": "interruption", "title": "An AI-enabled workflow stops operating", "lossToDescribe": "Your operations are interrupted, potentially involving an upstream provider.", "discussion": "Ask about interruption, system-failure, dependency and restoration wording for the actual cause.", "questions": [ "Which cause of interruption must fall within the wording?", "Are the affected systems and upstream services within the defined scope?", "Which waiting periods, loss measures, restoration costs and limits apply?", "What evidence distinguishes a covered event from an ordinary service or commercial dispute?" ], "evidenceToPrepare": [ "Service dependency map", "Outage and recovery chronology", "Financial-loss calculation", "Relevant provider communications" ] }, { "id": "ip-output", "title": "A third party challenges an AI-assisted output", "lossToDescribe": "The complaint concerns rights in output, training material or a delivered service.", "discussion": "Ask about the particular intellectual-property, media, output or liability provisions.", "questions": [ "Which alleged rights and activities are addressed by the wording?", "How are training inputs, generated outputs and downstream publication distinguished?", "What defense, settlement-consent, exclusion and territory terms are relevant?", "What should we preserve while qualified legal and insurance advisers review the allegation?" ], "evidenceToPrepare": [ "Allegation and publication chronology", "Input and output provenance references", "Relevant permissions or licenses", "Contract and policy references" ] }, { "id": "regulatory-review", "title": "A regulator investigates an AI-enabled process", "lossToDescribe": "There may be investigation costs, remediation obligations or a potential penalty.", "discussion": "Ask about investigation and defense costs and any legally insurable penalties; do not assume all fines can be insured.", "questions": [ "Which investigations, insured persons and AI-enabled activities are within the wording?", "Which defense or response costs are addressed, if any?", "Which penalties, if any, are legally insurable and included in the applicable jurisdiction?", "What notification, cooperation, consent and document-preservation obligations need immediate review?" ], "evidenceToPrepare": [ "Regulatory communication", "Process and governance records", "Change and incident history", "Policy and endorsement references" ] }, { "id": "repeated-errors", "title": "The same model error affects many customers", "lossToDescribe": "A repeated failure can generate multiple losses, complaints or claims.", "discussion": "Ask about aggregation and shared limits rather than assuming a new limit for every event.", "questions": [ "How does the wording group related errors, incidents, models or claims?", "Which per-claim, per-model, aggregate or other limits apply to these facts?", "Do defense costs or earlier claims reduce any applicable limit?", "How are the relevant dates, prior events and notifications determined under the policy?" ], "evidenceToPrepare": [ "Linked incident and claim register", "Affected model and deployment versions", "Loss and defense-cost records", "Relevant policy periods and notices" ] }, { "id": "changed-deployment", "title": "The deployed agent changes after insurance is arranged", "lossToDescribe": "The insured deployment may have a new model, tool, permission boundary or use case.", "discussion": "Ask about disclosure and change requirements; the map does not decide whether coverage continues or is lost.", "questions": [ "Which changes must be notified, agreed or documented under the actual terms?", "Does the described deployment still match the insured activities and scheduled systems?", "What new test, governance or performance evidence should be supplied?", "What written clarification or endorsement, if any, is needed before relying on the changed deployment?" ], "evidenceToPrepare": [ "Before-and-after deployment inventory", "Known and unknown changes", "Relevant retest and control records", "Broker and insurer correspondence" ] } ] }