Lifecycle Fields
| Field | Type | Description |
|---|---|---|
expires_at | ISO 8601 datetime | When the agent authorization expires |
review_frequency | weekly | monthly | quarterly | annually | How often the agent must be reviewed |
sponsor_id | string | The person or team responsible for this agent |
Set Agent Lifecycle
List Expired Agents
Returns agents whoseexpires_at date has passed. Use this to identify agents that need decommissioning or renewal.
List Agents Due for Review
Returns agents whose next review date has passed or is approaching. Use this to enforce periodic access reviews.Review Frequency Options
| Frequency | Review interval |
|---|---|
weekly | Every 7 days |
monthly | Every 30 days |
quarterly | Every 90 days |
annually | Every 365 days |
next_review_at date is automatically calculated from the last review date (or lifecycle creation date) plus the review interval.
Audit Trail
Lifecycle changes are tracked in the audit trail:| Event Type | Description |
|---|---|
agent.lifecycle.updated | Lifecycle fields changed (includes old and new values) |
agent.expired | Agent passed its expiry date |
agent.review.due | Agent review is overdue |
Use Cases
- Compliance — EU AI Act requires periodic review of high-risk AI systems. Set
review_frequencytoquarterlyfor high-risk agents. - Shadow agent cleanup — Set short expiry dates on newly discovered agents to force review.
- Team accountability — Assign
sponsor_idso every agent has a responsible owner. - Automatic decommissioning — Combine with the kill switch to auto-block expired agents.

