Excessive agency occurs when AI systems act too autonomously, making decisions without appropriate human oversight. To mitigate this in a browser extension, the BEST approach is to minimize functionality (A), ensuring the extension performs only narrowly defined, controlled actions. This aligns with AAIA's guidance on limiting AI autonomy , applying least-privilege principles, and restricting unnecessary actions.
Removing user access entirely (B) is overly restrictive. Maximizing functionality (C) increases risk. Open- source extensions (D) improve transparency but do not inherently control excessive agency. Scope limitation is the most targeted and effective mitigation.
References:
ISACA, AAIA Exam Content Outline - Domain 1: Governance, AI Autonomy, and Risk Controls.