Every agent · Coding agents · open source

Cline

Q: What can Cline act on?

Executes with approval. An editor agent that edits, runs commands and browses, with per-action approval that can be auto-approved. Data goes to whichever model provider the developer configured.

Q: Is a human in the loop with Cline, and does data leave the tenant?

Human in the loop by default: configurable. Data leaves the tenant by default: configurable. It acts, but a person approves each action by default; the risk moves to whoever relaxes that setting. Whether data leaves your tenant depends on how it is deployed.

An editor agent that edits, runs commands and browses, with per-action approval that can be auto-approved. Data goes to whichever model provider the developer configured.

executes with approval

acts on

configurable

human in the loop by default

configurable

data leaves the tenant by default

The workspace, terminal and browser inside the editor, plus any MCP server it is given

reaches by default

What that means for the register

It acts, but a person approves each action by default; the risk moves to whoever relaxes that setting. Whether data leaves your tenant depends on how it is deployed. Pasted with only its name it lands as control until an owner is named.

This week

Ask which provider and key sit behind it and whether auto-approve is on.

What holding it is evidence for

Requirement text and artefacts from a human-verified corpus licensed to Agent Register.

Broad system reach or write access to a system of record ISO 42001 A.4.4 · ISO 42001 A.4.5 · ISO 42001 A.6.2.5 · ISO 42001 A.5.2 · EU AI Act Art.15 · EU AI Act Art.9

ISO 42001 A.4.4 Tooling resources

The organization shall document information about the tooling resources utilized for the AI system.

Evidence an auditor accepts: Tooling inventory; Tool risk assessments; Development frameworks, libraries, MLOps platforms

ISO 42001 A.4.5 System and computing resources

The organization shall document information about the system and computing resources utilized.

Evidence an auditor accepts: Infrastructure inventory; Capacity plans; Compute (CPU/GPU), storage, network resources

ISO 42001 A.6.2.5 AI system deployment

The organization shall document a deployment plan and ensure requirements are met before deployment.

Evidence an auditor accepts: Deployment plans; Go-live checklists; Approval records

ISO 42001 A.5.2 AI system impact assessment process

The organization shall establish a process to assess the potential consequences of the AI system for individuals or groups and societies.

Evidence an auditor accepts: AI impact assessment procedure; Assessment template; Methodology covering individuals, groups, societies

EU AI Act Art.15 Accuracy, robustness and cybersecurity

High-risk AI systems shall be designed and developed in such a way that they achieve an appropriate level of accuracy, robustness, and cybersecurity, and shall perform consistently in those respects throughout their lifecycle. Resilience to errors, faults and inconsistencies; protection against atte...

Evidence an auditor accepts: Accuracy/robustness measurements relevant to the intended purpose; Adversarial/data-poisoning threat modelling and mitigation; Cybersecurity controls aligned with state-of-the-art

EU AI Act Art.9 Risk management system

Providers shall establish, implement, document and maintain a risk management system as a continuous iterative process planned and run throughout the entire lifecycle of a high-risk AI system, including identification and analysis of known and reasonably foreseeable risks, estimation/evaluation of r...

Evidence an auditor accepts: Risk management system documentation; Lifecycle risk analysis records; Post-deployment risk monitoring

Do this for every tool your teams use

Paste the list and get this classification for every entry at once, with the owner column, the findings per department, and the controls the register is evidence for. Ten entries free, no account.

Build my agent register

Aider · Continue