Who Can Trigger Break-Glass (Level 2 or Above) The break-glass procedure defines who is authorised to stop the system. For high-risk AI systems, any person at Level 2 or above in the oversight pyramid should be able to trigger a break-glass action. Requiring senior management approval before stopping a potentially harmful system introduces delay that may increase harm. The broad authorisation reflects the practical reality that the person closest to the system’s operation is most likely to observe harmful behaviour first. An operator who notices the system producing systematically biased outputs should be able to halt processing immediately, without waiting for management authorisation. The break-glass authorisation list is documented in the AISDP and communicated during training. Every authorised person knows how to activate the procedure and is protected from reprisal for doing so. Key outputs

• Level 2 and above authorised to trigger break-glass
• No senior management pre-approval required
• Authorisation list documented in AISDP
• Communication during training