Track: requirement-level AISVS C9.2.x mapping for agentic entries (future Agentic Top 10 AISVS mapping) #15

Parking this from GenAI-LLM-Top10#120, which @rocklambros closed on scope grounds (correctly). Requirement-level C9 controls are model-as-actor territory per the LLM Top 10 Preface boundary, so they belong in an Agentic Top 10 AISVS mapping, not the LLM appendix. That mapping does not exist yet, so this is a tracking placeholder for whenever it does.

Starting analysis, for the agentic manifestation of Excessive Agency:

• AISVS 1.0 C9.2.3: reversibility classification of actions
• AISVS 1.0 C9.2.4: enforce by class (gate tool actions)
• AISVS 1.0 C9.2.10: worst-case reversibility across chained calls

This is the verification-side counterpart to the reversibility-graded authority proposal in #13, extensible to other agentic entries as the mapping matures. No action needed now, just capturing it so it stays durable.