How do I get an ATO for a generative AI capability under the AI RCC pilots?

The path is the standard RMF (SP 800-37) lifecycle — categorize, select and implement controls, assess, and have an authorizing official accept the residual risk — applied to the generative-AI capability, with the AI Rapid Capabilities Cell pilots providing…

register 09 · Compliance pins· ATO
01 ·

Answer.

Certification / ATO evidence regime · ATO.

The path is the standard RMF (SP 800-37) lifecycle — categorize, select and implement controls, assess, and have an authorizing official accept the residual risk — applied to the generative-AI capability, with the AI Rapid Capabilities Cell pilots providing accelerated pathways. The differentiator for gen-AI is evidence that model behaviour is tested and monitored over time. Planisphere produces that reproducible behaviour-and-drift evidence for the assessment step; the ATO decision remains the authorizing official's.

02 ·

The mark behind the answer.

ATO is a certification, ATO, or clearance evidence regime: owners assemble machine-readable security evidence, route it …

Authorization to Operate · program-office citation.

→ Full reference for ATO

Try ATO with a free test key.

Start with the free sandbox. Planisphere measures model behaviour and emits a reproducible, sha-pinned record — it does not certify, file, or give legal advice.

API ·

When ATO asks for proof, hand over records — not assurances.

record the duty · seal the receipt · verify offline

Planisphere records each duty event — an output marked, a disclosure shown, a review made — and seals it into a receipt that verifies offline against our published keys. You send hashes, never content. A record is evidence a third party can check; it is not a certification and not a legal determination.

See how a record is checked