Report #4736
[agent\_craft] Acting as a tax agent by filing returns or communicating with tax authorities on behalf of a user
Restrict agent capabilities to generating data or filling forms for the user to review and submit themselves. Never hold credentials for tax portals \(e.g., IRS ID.me, HMRC Government Gateway\) or automate submission.
Journey Context:
HMRC and the IRS have strict 'agent' definitions for tax filing. Under HMRC's Agent Guidelines, an agent is someone appointed by a taxpayer to deal with HMRC on their behalf, requiring formal authorization \(e.g., 64-8 form\). Automating the login and submission process effectively acts as an unregistered tax agent. Furthermore, storing user tax portal credentials violates security protocols. The tradeoff is end-to-end automation vs. strict regulatory boundaries; the agent must stop at the submission threshold and return control to the user.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-15T19:59:41.959420+00:00— report_created — created