Register 09 · Compliance controls.

NIST AI 100-1 · Govern · Map · Measure · Manage

Reference · Brief

federal AI risk-management + acquisition

Reference · Brief

Responsible · Equitable · Traceable · Reliable · Governable

Reference · Brief

Removing Barriers to American Leadership in AI (Jan 2025)

Reference · Brief

international AI management system standard

Reference · Brief

crypto module validation · 4 security levels

Reference · Brief

hash algorithm · per-file pinning primitive

Reference · Brief

supply-chain levels for software artifacts

Reference · Brief

software bill of materials · NTIA + CISA

Reference · Brief

supply-chain integrity, transparency, trust · IETF

Reference · Brief

supply-chain risk · NIST SP 800-161r1

Reference · Brief

controls baseline · 20 families · AI overlays

Reference · Brief

Cybersecurity Maturity Model · L1 · L2 · L3

Reference · Brief

Secure Software Development Framework

Reference · Brief

Authorization to Operate · program-office citation

Reference · Brief

DoD Impact Levels · classified delivery

Reference · Brief

CUI handling · 72-hour breach reporting

Reference · Brief

health privacy · patient data confidentiality

Reference · Brief

ACA non-discrimination in patient-care AI

Reference · Brief

Predetermined Change Control · medical AI

Reference · Brief

expert testimony · reliability gatekeeping

Reference · Brief

Rule 1.1 · 1.6 · 3.3 · 5.1–5.3 · Op 512

Reference · Brief

education records · student-data privacy

Reference · Brief

Civil Rights · disparate-impact disclosure

Reference · Brief

Govern function · 6 categories · 19 subcategories · cross-cutting risk culture

Reference · Brief

Map function · context & risk framing · 16 subcategories

Reference · Brief

Measure function · TEVV · 19 subcategories · the audit-triad home

Reference · Brief

Manage function · risk treatment & prioritization · 10 subcategories

Reference · Brief

Generative-AI risk profile · companion to the AI RMF

Reference · Brief

Federal AI use · Chief AI Officer · high-impact minimum practices (issued 2025-04-03)

Reference · Brief

Federal AI acquisition · anti-lock-in · performance/risk monitoring clauses

Reference · Brief

M-25-21 risk class · 7 minimum practices · the pre-deployment testing obligation

Reference · Brief

SP 800-218 PS practices · the SLSA-attested subgroup

Reference · Brief

9 control topics · ~42 AIMS controls · the auditable surface

Reference · Brief

Audit & Accountability control family · maps to the evidence record

Reference · Brief

Assess/Authorize/Monitor family · maps to the re-run cadence

Reference · Brief

Federal cloud authorization · Low/Mod/High + 20x machine-readable KSIs

Reference · Brief

Impact Levels 5-6 · NSS + Classified-to-Secret · air-gapped delivery

Reference · Brief

Risk Management Framework · the 7-step ATO lifecycle the package follows

Reference · Brief

USML technical-data control · deemed-export boundary for model artifacts

Reference · Brief

Dual-use export control (EAR99 / CCL) · AI-diffusion chip + weight controls

Reference · Brief

Offline / SCIF deployment · evidence check with no network egress

Reference · Brief

Medicare/Medicaid coverage · algorithm cannot be the sole basis to deny care

Reference · Brief

predictive-DSI transparency · 31 source attributes · FAVES

Reference · Brief

the 31 predictive-DSI source attributes as an evidence checklist

Reference · Brief

Predetermined Change Control Plan · drift-bounded model updates

Reference · Brief

clearance pathway for AI/ML device software functions

Reference · Brief

Good Machine Learning Practice · 10 lifecycle principles

Reference · Brief

ePHI safeguards · 2025 NPRM cyber-modernization (PROPOSED)

Reference · Brief

physician-responsibility · standard-of-care · state medical-board AI policy

Reference · Brief

machine-generated evidence · Rule-702-grade reliability for AI output (PROPOSED)

Reference · Brief

generative-AI duties · competence · confidentiality · candor · supervision

Reference · Brief

hallucinated-authority sanctions wave · Rule 11 / 9011 · candor-to-tribunal

Reference · Brief

CA · FL · TX · NY · PA · NC bar gen-AI ethics guidance roundup

Reference · Brief

disability nondiscrimination · FAPE · AI in accommodation determinations

Reference · Brief

special-ed · IEP integrity · AI in eligibility & service determinations

Reference · Brief

under-13 data · 2025 amended Rule · ed-tech consent & retention

Reference · Brief

ED Office for Civil Rights · discriminatory-AI nondiscrimination resource

Reference · Brief

student-data-privacy model law · 20+ state adoptions · no-profiling

Reference · Brief

automated proctoring/grading · §504 disparate-impact across cohorts

Reference · Brief

AEDT bias-audit mandate — the literal third-party audit Planisphere performs

Reference · Brief

SB 24-205 → SB 26-189 lineage · high-risk notice/transparency (eff 2027-01-01)

Reference · Brief

HB 149 intent-based AI governance (eff 2026-01-01)

Reference · Brief

SB 149 / SB 226 disclosure-on-request for generative AI

Reference · Brief

IHRA AI-employment non-discrimination + notice (eff 2026-01-01)

Reference · Brief

SB 942 + AB 2013 + SB 53 + CCPA ADMT — the CA frontier/transparency stack

Reference · Brief

risk-tiered conformity assessment + post-market monitoring (phased 2025-2027)

Reference · Brief

voluntary interim evidence bridge for general-purpose AI models

Reference · Brief

principles-based, sector-led · AI Bill anticipated 2026

Reference · Brief