Solutions — instrument
NIST AI RMF 1.0, against records rather than intentions.
AI Risk Management Framework 1.0. Voluntary, which is exactly why the evidence matters: nobody is compelled to produce it, so producing it is a signal.
NIST AI 100-1
Voluntary — NIST
clause map
Status
Published, voluntary
Applies to
Any organisation designing, developing or deploying AI
What the platform evidences
- Govern
- Accountability that is structural rather than documented: an agent with no named owner cannot be granted anything, and high-value authority takes a second named person.
- Map
- The agent and model inventories, the tools an agent may reach, and the third-party MCP servers in the path — with a manifest change under an agent's feet recorded as drift.
- Measure
- Refusal rates, behavioural drift against a baseline, the fairness screen over declared attributes, and the adversarial grid against our own detectors.
- Manage
- The enforcement ladder, revocation reaching a whole tree, and incident classification with the clock that follows from it.
The AI RMF is a framework rather than a checklist, and no product satisfies it. What a platform can do is produce the artefacts a Measure or Manage claim would otherwise rest on assertion for — and say which of the four functions it touches at all.