Live demo of the Axiom Audit Portal. Data is synthetic but representative of a real assessment.
Recommended Assessment Outcome
BLOCK
Residual Non-Conformity Index
ELEVATED
Score: 2.41
(Unwitnessed ÷ Total) × Severity × Staleness
Passing
43
of 137 requirements
Findings
9
open findings
EU AI Act risk tier determines which conformity obligations apply. Select the classification that matches this AI system.
AI systems in Annex III areas that pose significant risks to health, safety, or fundamental rights. Requires third-party or internal conformity assessment.
Obligations
Full conformity assessment required: risk management (Art. 9), data governance (Art. 10), logging (Art. 12), transparency (Art. 13), human oversight (Art. 14), accuracy & robustness (Art. 15), post-market monitoring (Art. 72).
Annex III Categories
Overall Conformity reflects article-level coverage: an article is COMPLIANT only when all its mapped procedures pass. Individual procedures may pass while article-level conformity remains incomplete.
Loading risk register...
Loading checklist...
AI Governance
| Procedure | Family | Title | Severity | Verdict | Last Witnessed | Verify |
|---|---|---|---|---|---|---|
| AI-HITL.3 | AI | Overseer Identity Capture - Reviewer Identified Per Decision Overseer identity capture is not active. EU AI Act Art. 12(2)(d) requires logs to include identification of natural persons involved in verification of results. NIST AI RMF GOVERN 1.1 requires traceable oversight. Evidence detail requires Pro Open 192d (overdue) | — | FAIL | 4/8/2026 | Verify → |
| AI-EXPL.1 | AI | Explanation Generation Explanation generation is not active. EU AI Act Art. 13(1) requires high-risk AI systems to be sufficiently transparent to enable deployers to interpret output. NIST AI RMF MEASURE 2.5 requires interpretability measures. Evidence detail requires Pro Frameworks:CO-SB-26-189EU-AI-ACTFIVE-EYES-AGENTICISO-42001KR-AI-BASICMD-HB-895NIST-AI-RMFSR-11-7CA-SB-942JP-AI-PROMOTIONNYC-LL144TW-AI-BASICTX-TRAIGANERC-CIPITU-T-AI Open 190d (overdue) | — | FAIL | 4/10/2026 | Verify → |
| AI-GRD.2 | AI | Content Safety Filter — Output Classification Passed Content safety filter not passed. EU AI Act Art. 9(4)(b) requires risk management to address reasonably foreseeable misuse including harmful outputs. NIST AI RMF GOVERN 1.5 requires ongoing policy compliance assessment. Evidence detail requires Pro Open 189d (overdue) | — | FAIL | 4/12/2026 | Verify → |
| AI-FAIR.2 | AI | Fairness Calibration Fairness calibration score is 1 against a minimum of 0.5. EU AI Act Art. 9(4)(a) requires elimination or reduction of risks. NIST AI RMF MAP 2.3 requires mapping AI impacts to affected populations. Score not meets minimum. Evidence detail requires Pro Open 188d (overdue) | — | FAIL | 4/13/2026 | Verify → |
| AI-EXPL.2 | AI | Confidence Scoring Model confidence score is 1 against a minimum of 0.5. EU AI Act Art. 13(3)(b)(ii) requires disclosure of the degree of accuracy. NIST AI RMF MAP 2.3 requires confidence calibration. Score not meets threshold. Evidence detail requires Pro Open 187d (overdue) | — | FAIL | 4/13/2026 | Verify → |
| AI-GOV.3 | AI | Approved Model Registry Approved model registry is not current. EU AI Act Art. 49 requires registration of high-risk AI systems in the EU database. NIST 800-53 CM-8 requires a system component inventory including version and risk classification. Evidence detail requires Pro Open 186d (overdue) | — | FAIL | 4/14/2026 | Verify → |
| AI-EMRG.1 | AI | Emergency Override Lifecycle Witnessing Emergency override is not authorized: trigger type 2 (0=e-stop, 1=operator, 2=escalation, 3=responder), authorization level 0 (0=operator, 1=supervisor, 2=manager, 3=responder), fallback state 0 (0=safe, 1=legacy, 2=manual, 3=degraded, 4=shutdown). EU AI Act Art. 14 requires human override capability for high-risk AI. IEC 61511 requires logged, auditable override events. Evidence detail requires Pro Open 96d | — | FAIL | 7/13/2026 | Verify → |
| AI-DRIFT.2 | AI | Consequence-Mapped Drift Threshold Response Drift consequence response is not proportional: drift magnitude 38, consequence category 3 (0=safety, 1=environmental, 2=financial, 3=operational, 4=reputational), response action 2 (0=notify, 1=monitor, 2=throttle, 3=circuit-break, 4=failover, 5=shutdown). EU AI Act Art. 9(2)(b) requires continuous risk estimation. OCC 2026-13 requires materiality-mapped drift tracking with graduated responses. Evidence detail requires Pro Open 96d | — | FAIL | 7/13/2026 | Verify → |
| AI-ASSESS.1 | AI | Champion-Challenger Assessment Witnessing Champion-challenger assessment is not within acceptance criteria: 8000 inputs processed, max divergence 142/1000, threshold breached = 1 (1=yes, 0=no). EU AI Act Art. 15 requires post-market monitoring. OCC 2026-13 requires versioned challenger runs with documented sign-off. Evidence detail requires Pro | — | FAIL | 7/13/2026 | Verify → |
| AI-MCP.2 | AI | Tool Integrity Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-REACH.1 | AI | Hazard Reachability Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MCP.3 | AI | Server Authentication Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-DATA.3 | AI | Training Data Statistics Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-DATA.4 | AI | Training Data PII Lifecycle Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MCP.4 | AI | Server Discovery Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-GOV.6 | AI | AI Risk Management Scope Definition Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-GOV.7 | AI | AI Governance Resource Allocation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-RISK.1 | AI | AI Risk Identification and Categorization Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-IR.1 | AI | AI Incident Response Capability Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-IMPACT.1 | AI | AI Societal Impact Assessment Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-RAG.2 | AI | Context Relevance Scoring Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MDL.5 | AI | Weight File Integrity Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MDL.6 | AI | Adapter Stack Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MDL.7 | AI | Quantization Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-SKILL.2 | AI | Memory Context Binding Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-SKILL.3 | AI | Reward Model Binding Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-HW.3 | AI | TPM Platform Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-TRUST.2 | AI | Trust Credential Presentation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-CHAIN.2 | AI | Chain Trust Degradation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-FAIR.3 | AI | Bias Audit Witnessing Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ENV.2 | AI | Dependency Manifest Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-BASE.1 | AI | Agent Behavioral Baseline Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-LIC.1 | AI | License Provenance Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-REDTEAM.1 | AI | Adversarial Test Campaign Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MULTI.1 | AI | Multi-Agent Delegation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-INCIDENT.1 | AI | Incident Reporting Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-PERF.1 | AI | Performance Metrics Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ROBUST.1 | AI | Robustness Testing Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-CYBER.1 | AI | Cybersecurity Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-AUTO.1 | AI | Automated Decision Notification Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-DUALUSE.1 | AI | Dual-Use Model Classification Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ORCH.1 | AI | Orchestration Topology Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ORCH.2 | AI | Inter-Agent Handoff Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-CTX.1 | AI | Context Window Management Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-SAND.1 | AI | Sandbox Enforcement Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-GATE.1 | AI | Eval Gate Decision Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-A2A.1 | AI | Task Delegation Lifecycle Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-SUPPLY.1 | AI | Supply Chain Risk Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-PMM.1 | AI | Post-Market Monitoring Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-AUTO.2 | AI | Autonomous Generation Depth Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-AUDIT.2 | AI | External Timestamp Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-A2A.2 | AI | Agent Card Discovery Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-A2A.3 | AI | Context Chain Linking Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MCP.5 | AI | OAuth Token Binding Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-DECOM.1 | AI | AI System Decommissioning Lifecycle Witness Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-METAGOV.1 | AI | Governance Infrastructure Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-METAGOV.2 | AI | Governance Layer Registration Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MOB.1 | AI | SIM-Bound Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MOB.2 | AI | Roaming Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MOB.3 | AI | Dual-SIM Policy Enforcement Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MOB.4 | AI | Peer-to-Peer Trust Mesh Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MOB.5 | AI | Bilateral Flush Correlation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-METAGOV.3 | AI | Policy Downgrade Detection Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-METAGOV.4 | AI | Circular Dependency Check Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-METAGOV.5 | AI | Governance Authorization Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-METAGOV.6 | AI | Emergency Override Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-METAGOV.7 | AI | Governance Sync Verification Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-METAGOV.8 | AI | Attestation Purity Verification Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-RECOMM.1 | AI | AI System Re-commissioning Validation Witness Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-DENSITY.1 | AI | Witnessing Density Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MOB.8 | AI | Network Slice Isolation Verification Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ENG.1 | AI | Design Generation Provenance Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ENG.2 | AI | Simulation Validation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ENG.3 | AI | Safety-Critical Review Gate Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ENG.4 | AI | Material Specification Compliance Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ENG.5 | AI | Design Revision Chain Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-ENG.6 | AI | Fabrication Release Authorization Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-FREEZE.1 | AI | Model Parameter Freeze Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-FIN.1 | AI | Agent Transaction Witnessing Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-LCM.1 | AI | Agent Lifecycle Witnessing Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MOB.6 | AI | Trajectory Decision Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MOB.7 | AI | VLA Inference Witnessing Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-TOOL.2 | AI | Tool Permission Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-JUR.1 | AI | Cross-Border Inference Routing Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-SAMPLE.1 | AI | Probabilistic Witnessing Summary Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MCP.1 | AI | MCP Security Posture Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-PROV.1 | AI | Model Provenance Chain Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-DEL.2 | AI | Delegation Boundary Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-COST.1 | AI | Resource Consumption Witnessing | — | UNKNOWN | — | — |
| AI-DEL.1 | AI | Delegation Tree Witnessing | — | UNKNOWN | — | — |
| AI-CAP.1 | AI | Capability Attestation | — | UNKNOWN | — | — |
| AI-AUTO.3 | AI | Autonomy Level Transition | — | UNKNOWN | — | — |
| AI-CLR.2 | AI | Clearing Fidelity Attestation | — | UNKNOWN | — | — |
| AI-MDL.8 | AI | Model Registry Attestation Awaiting evidence collection. No witness anchor recorded for this procedure. | — | UNKNOWN | — | — |
| AI-MDL.2 | AI | Model Version Tracking — Version Identifier Recorded Model version recording is active. EU AI Act Art. 12(2)(b) requires logs to include identification of the reference database. NIST AI RMF MANAGE 2.2 requires post-deployment version monitoring. Evidence detail requires Pro | — | PASS | 4/8/2026 | Verify → |
| AI-LOG.1 | AI | Log Retention Compliance - Minimum 180-Day Retention Verified AI inference log retention is 1 days (minimum required: 1 days). EU AI Act Art. 12(3) requires deployers to keep automatically generated logs for at least six months. Retention compliant. Evidence detail requires Pro | — | PASS | 4/9/2026 | Verify → |
| AI-MDL.4 | AI | Feedback Loop Control - Training Data Isolation From Biased Outputs Feedback loop isolation is active. EU AI Act Art. 15(4) requires controls to prevent biased outputs from contaminating training data in systems that continue learning after deployment. NIST AI RMF MANAGE 2.2 requires ongoing risk tracking. Evidence detail requires Pro | — | PASS | 4/11/2026 | Verify → |
| AI-GRD.3 | AI | PII Redaction PII redaction is active. EU AI Act Art. 10(2)(f) requires examination of possible biases affecting health and safety, with data privacy measures. NIST AI RMF GOVERN 1.7 requires data protection processes. Evidence detail requires Pro | — | PASS | 4/11/2026 | Verify → |
| AI-FAIR.1 | AI | Bias Disparity Measurement Bias disparity ratio is 1 against a maximum of 1. EU AI Act Art. 10(2)(f) requires examination of possible biases in training datasets and outputs. NIST AI RMF MEASURE 2.5 requires bias evaluation across demographic groups. Disparity within threshold. Evidence detail requires Pro | — | PASS | 4/13/2026 | Verify → |
| AI-DATA.1 | AI | Training Data Provenance Training data provenance is documented. EU AI Act Art. 10(2)(a) requires documenting relevant design choices including data collection processes. NIST AI RMF MAP 3.5 requires documentation of data provenance and lineage. Evidence detail requires Pro | — | PASS | 4/14/2026 | Verify → |
| AI-DATA.2 | AI | Training Data License Compliance Training data license compliance is verified. EU AI Act Art. 10(2)(a) requires data governance covering design choices and data origin. NIST AI RMF GOVERN 1.7 requires conformance with legal and regulatory data requirements. Evidence detail requires Pro | — | PASS | 4/12/2026 | Verify → |
| AI-HITL.2 | AI | Human Override Event Tracking Human override event logging is active. EU AI Act Art. 14(4)(d) requires the ability to disregard, override, or reverse AI output. NIST AI RMF MANAGE 4.1 requires mechanisms to respond to AI incidents. Evidence detail requires Pro | — | PASS | 4/8/2026 | Verify → |
| AI-GOV.1 | AI | AI Acceptable Use Policy AI acceptable use policy is current and communicated. EU AI Act Art. 9 requires a risk management system throughout the lifecycle of a high-risk AI system. NIST 800-53 PL-4 requires rules of behavior for system users. Evidence detail requires Pro | — | PASS | 4/14/2026 | Verify → |
| AI-GOV.2 | AI | Employee AI Training AI accountability training is complete for all personnel with AI system access. EU AI Act Art. 4 requires providers and deployers to ensure sufficient AI literacy of staff. NIST 800-53 AT-2 requires security awareness training. Evidence detail requires Pro | — | PASS | 4/9/2026 | Verify → |
| AI-GOV.4 | AI | Shadow AI Incident Response Shadow AI incident response procedure is documented. EU AI Act Art. 26 requires deployers to monitor AI system operation and report incidents. NIST 800-53 IR-4 requires incident handling procedures for unauthorized system usage. Evidence detail requires Pro | — | PASS | 4/13/2026 | Verify → |
| AI-GOV.5 | AI | Third-Party AI Vendor Assessment Third-party AI vendor assessments are complete. EU AI Act Art. 25 establishes responsibilities along the AI value chain for distributors and deployers. NIST 800-53 SA-4 requires acquisition processes that include security requirements. Evidence detail requires Pro | — | PASS | 4/12/2026 | Verify → |
| AI-TOOL.1 | AI | Tool Call Witnessing Tool call executed: input/output hashed, latency 9ms, result 1 (1=success, 0=exception). EU AI Act Art. 14 requires human oversight of AI system actions including tool use. NIST AI RMF MANAGE 4.1 requires mechanisms for tracking AI system actions and their outcomes. Evidence detail requires Pro | — | PASS | 7/13/2026 | Verify → |
| AI-ID.1 | AI | Agent Identity Assertion Agent identity is attested. The witness instance that signed this anchor has a bound identity (1 = 1 if agent_id hashed into fingerprint). EU AI Act Art. 13 requires transparency about the identity of AI system providers and deployers. NIST AI RMF GOVERN 1.1 requires clear accountability structures for AI system oversight. Evidence detail requires Pro | — | PASS | 7/13/2026 | Verify → |
| AI-ACC.1 | AI | Agent Access Control Witnessing Access control decision is witnessed: access granted = 0 (1=granted, 0=denied), within declared scope = 1 (1=yes, 0=out-of-scope). NIST 800-53 AC-4 requires enforcement of approved authorizations. EU AI Act Art. 26 requires deployers to ensure use within intended scope. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-REV.1 | AI | Anchor Revocation Anchor revocation is recorded: reason code 0 (0=unspecified, 1=model_recall, 2=policy_violation, 3=data_contamination, 4=consent_withdrawal, 5=regulatory_order, 6=error_correction). Revocation is always PASS (the revocation itself is valid evidence). NIST 800-53 SI-7 requires integrity verification mechanisms. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-SEC.1 | AI | Adversarial Threat Detection Security scan is clean: threat score 1 against threshold 1, threat type code 0 (0=none, 1=prompt_injection, 2=data_poisoning, 3=model_extraction, 4=jailbreak, 5=adversarial_input). EU AI Act Art. 15 requires cybersecurity resilience. NIST AI RMF MANAGE 2.2 requires monitoring for adversarial attacks. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-SEC.2 | AI | Input Validation and Sanitization Input validation is passed: accepted = 1 (1=clean, 0=blocked), sanitization status 0 (0=clean, 1=sanitized, 2=rejected). EU AI Act Art. 15(4) requires resilience against unauthorized manipulation. NIST 800-53 SI-10 requires information input validation. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-RAG.1 | AI | Context Retrieval Provenance RAG context retrieval is witnessed: 0.94 chunks retrieved, corpus identified = 6 (1=yes, 0=anonymous). EU AI Act Art. 12(2)(a) requires logging the reference database used by AI systems. NIST AI RMF MAP 3.5 requires documentation of data provenance and lineage. Evidence detail requires Pro | — | PASS | 7/13/2026 | Verify → |
| AI-SKILL.1 | AI | Skill Manifest Attestation Skill manifest is attested: 1 skills loaded, manifest verified = 1 (1=match, 0=mismatch). EU AI Act Art. 12(2)(b) requires version tracking of AI system capabilities. NIST AI RMF GOVERN 1.7 requires capability documentation. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-HW.1 | AI | Hardware Runtime Attestation Accelerator hardware is attested: 8 GPUs detected, all healthy = 1 (1=yes, 0=degraded/none), topology code 1 (0=single, 1=multi-GPU/DGX, 2=multi-node/NVL72, 3=unknown). EU AI Act Art. 15 requires documenting the technical means of the AI system. NIST 800-53 SI-7 requires integrity verification of execution environments. Evidence detail requires Pro | — | PASS | 7/13/2026 | Verify → |
| AI-TRUST.1 | AI | Trust Verification Agent trust verification is granted: trust level 0 (0=denied, 1=basic, 2=verified, 3=attested, 4=sovereign). Counterpart agent's compliance posture was verified before interaction. EU AI Act Art. 25 requires documented responsibilities along the AI value chain. NIST 800-53 AC-4 requires information flow enforcement between systems. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-CHAIN.1 | AI | Multi-Agent Chain Handoff Multi-agent chain handoff is recorded: chain depth = 1, cycle bound = 1 (1=yes, 0=no), handoff accepted = 0 (1=yes, 0=rejected). EU AI Act Art. 9 requires risk management across system interactions. NIST AI RMF GOVERN 1.3 requires accountability for multi-component systems. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-SAFE.1 | AI | Safe State Transition Safe state transition is recorded: trigger code 1 (0=manual, 1=threshold, 2=chain_break, 3=policy, 4=external), 1 actions suspended, recovery available = 0 (1=yes, 0=no). EU AI Act Art. 9(4)(b) requires stop mechanisms and safe state transitions. Art. 14(4)(e) requires human override capability. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-CHR.1 | AI | Agent Charter Registration Agent charter is registered: 1 capabilities declared, 1 constraints declared, charter hash present = 0 (1=yes, 0=no). EU AI Act Art. 13 requires documentation of system capabilities and limitations. NIST AI RMF GOVERN 1.7 requires transparency of AI system design. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-VIO.1 | AI | Policy Violation Record Policy violation is recorded: violation type code 1 (0=guardrail, 1=access, 2=scope, 3=policy, 4=safety, 5=other), severity = 1 (1=low, 2=medium, 3=high, 4=critical), auto-remediated = 0 (1=yes, 0=escalated). EU AI Act Art. 9 requires risk management. NIST AI RMF MANAGE 4.1 requires violation tracking and response. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-ENV.1 | AI | Runtime Environment Attestation Runtime environment is attested: environment hash present = 1 (1=yes, 0=no), container isolated = 1 (1=yes, 0=no), runtime type code 0 (0=bare_metal, 1=vm, 2=container, 3=serverless, 4=edge). EU AI Act Art. 11 requires technical documentation of deployment environment. NIST AI RMF GOVERN 1.2. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-MARK.1 | AI | Content Provenance Marking Content provenance marking is recorded: 1 content items marked, C2PA/watermark metadata attached = 1 (1=yes, 0=no), content type code 0 (0=text, 1=image, 2=audio, 3=video, 4=multimodal, 5=code, 6=structured). EU AI Act Art. 50(2) requires AI-generated content to be marked in a machine-readable format. GPAI Code of Practice requires transparency labelling. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-SBOM.1 | AI | AI Bill of Materials AI bill of materials is documented: 1 total components inventoried, 1 of 7 G7 clusters documented, format code 0 (0=cyclonedx, 1=spdx, 2=custom, 3=unknown). G7/CISA SBOM for AI Minimum Elements (May 2026) requires comprehensive component inventory. EU AI Act Art. 11 + Annex IV requires technical documentation of AI system composition. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-CONSENT.1 | AI | Data Subject Consent Data subject consent is documented: 1 subjects covered, legal basis code 1 (0=consent, 1=contract, 2=legal_obligation, 3=vital_interest, 4=public_task, 5=legitimate_interest), withdrawal available = 0 (1=yes, 0=no). GDPR Art. 6/7 requires documented lawful basis for processing. EU AI Act Art. 10 requires data governance including lawful basis documentation. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-DRIFT.1 | AI | Model Drift Detection Model drift is detected: 1 metrics evaluated, 1 drifted, drift type code 0 (0=data, 1=concept, 2=prediction, 3=feature, 4=label, 5=prior_probability). EU AI Act Art. 9(2)(b) requires continuous risk estimation including emerging risks during operation. NIST AI RMF MEASURE 2.6 requires measurement of AI system trustworthiness over time. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-AUDIT.1 | AI | Audit Log Integrity Audit log integrity is verified: 1 entries checked, integrity verified = 1 (1=yes, 0=no), log format code 0 (0=jsonl, 1=syslog, 2=otel, 3=custom). EU AI Act Art. 12 requires automatic recording of events with traceability. GDPR Art. 30 requires records of processing activities. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-TRANS.1 | AI | Transparency Disclosure Transparency disclosure is recorded: 1 disclosures made, disclosure type code 1 (0=ai_usage, 1=data_processing, 2=automated_decision, 3=profiling, 4=capability_limitation), recipient type code 0 (0=deployer, 1=end_user, 2=data_subject, 3=authority). EU AI Act Art. 13 requires transparency. GDPR Art. 13/14 requires information about automated processing. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-WATERMARK.1 | AI | Watermark Verification Watermark verification is recorded: 1 items checked, 1 watermarks detected, detection method code 0 (0=c2pa_verify, 1=synthid_check, 2=metadata_scan, 3=spectral_analysis, 4=classifier). EU AI Act Art. 50(2) requires machine-readable provenance that is detectable. GPAI Code of Practice requires transparency labelling. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-DPIA.1 | AI | Data Protection Impact Assessment Data protection impact assessment is recorded: 1 risks identified, 1 mitigated, processing type code 0 (0=profiling, 1=automated_decision, 2=large_scale_monitoring, 3=sensitive_data, 4=combined). GDPR Art. 35 requires DPIA for high-risk processing. EU AI Act Art. 27 requires fundamental rights impact assessment. Evidence detail requires Pro | — | PASS | 6/10/2026 | Verify → |
| AI-GRD.1 | AI | Guardrail Enforcement — Required Safety Filters Active Found 1 active safety guardrails (required: 1). EU AI Act Art. 9(2)(a) requires suitable risk management measures to identify and mitigate risks. NIST AI RMF MANAGE 4.1 requires risk treatments. Guardrail enforcement: met. Evidence detail requires Pro | CAT II | PASS | 4/20/2026 | Verify → |
| AI-INF.1 | AI | Inference Provenance — Prompt/Response Hash Capture Inference provenance hashing is active. EU AI Act Art. 12(1) requires automatic logging of all periods of use of high-risk AI systems. NIST AI RMF MEASURE 2.5 requires measurement of AI system trustworthiness. Evidence detail requires Pro | — | PASS | 4/20/2026 | Verify → |
| AI-INF.2 | AI | Inference Latency — Response Time Within Threshold Inference latency was 1ms against a 1ms threshold. EU AI Act Art. 15(3) requires AI systems to perform consistently. NIST AI RMF MEASURE 2.6 requires performance monitoring. Latency outside bounds may indicate model swaps or resource exhaustion. Evidence detail requires Pro | — | PASS | 4/20/2026 | Verify → |
| AI-MDL.1 | AI | Model Weight Integrity — Deployed Hash Matches Approved Model identity verification confirmed. EU AI Act Art. 9(4)(a) requires identifying and analysing known and foreseeable risks including model tampering. NIST AI RMF GOVERN 1.1 requires model lifecycle governance. Evidence detail requires Pro | — | PASS | 4/20/2026 | Verify → |
| AI-INF.3 | AI | Inference Volume - Hourly Rate Governance Inference volume was 1 against a 1 hourly limit. EU AI Act Art. 12(1) requires automatic logging covering the period of each use. NIST AI RMF GOVERN 2.1 requires accountability structures. Evidence detail requires Pro | — | PASS | 4/10/2026 | Verify → |
| AI-MDL.3 | AI | Model Drift Detection Model drift score is 1 against a threshold of 1. EU AI Act Art. 72(1) requires post-market monitoring to identify risks emerging after deployment. NIST AI RMF MEASURE 2.6 requires measurement of behavioral changes. Evidence detail requires Pro | — | PASS | 4/9/2026 | Verify → |
| AI-HITL.1 | AI | Human Review Completion Human review of AI decision is completed. EU AI Act Art. 14(1) requires high-risk AI systems to be designed so they can be effectively overseen by natural persons. NIST AI RMF GOVERN 1.1 requires human oversight governance. Evidence detail requires Pro | — | PASS | 4/12/2026 | Verify → |
| AI-3.2 | AI | AI Model Inventory Evidence detail requires Pro CCI-000366Must maintain AI model inventory Assessment Objectives (800-53A) PARTIALTEST+EXAMINEan inventory of system components that accurately reflects the system is developed and documented; PARTIALTEST+EXAMINEan inventory of system components that includes all components within the system is developed and documented; PARTIALTEST+EXAMINEan inventory of system components that does not include duplicate accounting of components or components assigned to any other system is developed and documented; PARTIALTEST+EXAMINEsystem components are assigned to a system; PARTIALTEST+EXAMINEan inventory of system components that is at the level of granularity deemed necessary for tracking and reporting is developed and documented; PARTIALTEST+EXAMINEan inventory of system components that includes [ORGANIZATION-DEFINED] is developed and documented; PARTIALTEST+EXAMINEthe system component inventory is reviewed and updated [ORGANIZATION-DEFINED]. PARTIALTEST+EXAMINEthe inventory of system components is updated as part of component installations; PARTIALTEST+EXAMINEthe inventory of system components is updated as part of component removals; PARTIALTEST+EXAMINEthe inventory of system components is updated as part of system updates. | — | PASS | 4/11/2026 | Verify → |
Loading findings...
Paste or upload the developer's .swt3-gate.yml file to evaluate their governance policy against the live compliance ledger.
Loading requests...
Loading interviews...
Same seed + same population = same sample. Reproducible for peer review.
Open
10
Overdue
6
Closed
66
| Procedure | Severity | Status | Days Open | Milestone |
|---|---|---|---|---|
| AI-GRD.1 | CAT II | OPEN | 96d | 9/11/2026 |
| AI-TOOL.1 | — | OPEN | 96d | 9/11/2026 |
| AI-EMRG.1 | — | OPEN | 96d | 9/11/2026 |
| AI-DRIFT.2 | — |
Models Witnessed
14
Total Inferences
182
Pass Rate
58%
Complete inventory of AI agents witnessed in this system. EU AI Act Articles 13 (Transparency) and 14 (Human Oversight) require disclosure of agent identity, capabilities, and operational boundaries.
Agents
8
Models
9
Tools Invoked
5
Violations
1
| Agent | Models | Inferences | Pass Rate | Clearing | Violations | Active Period |
|---|---|---|---|---|---|---|
▶ drift-watchdog | claude-sonnet-4-20250514fraud-model-v7fraud-model-v6 | 14 | 36% | L1 Standard | 0 | Jul 13 — Jul 13 |
▶ rag-assistant | gpt-4o | 4 | 100% | L1 Standard | 0 | Jun 17 — Jul 13 |
▶ safety-monitor-v3 | gpt-4o-2025-04-16valve-controller-v2 | 4 | 50% | L1 Standard | 0 | Jul 13 — Jul 13 |
▶ doc-processor | gpt-4o-mini | 2 | 100% | L2 Sensitive | 0 | Jun 17 — Jul 13 |
▶ gpu-node-prod-01 | hw-nvidia-multi-gpu | 1 | 100% | L1 Standard | 0 | Jul 13 — Jul 13 |
▶ assessment-runner | gpt-4o-mini-2025-04-16 | 1 | 100% | L1 Standard | 0 | Jul 13 — Jul 13 |
▶ fraud-orchestrator | gpt-4o | 1 | 100% | L1 Standard | 0 | Jul 13 — Jul 13 |
▶ data-analyst | gpt-4o | 1 | 0% | L2 Sensitive | 1 | Jul 13 — Jul 13 |
Loading monitoring data...
Be among the first firms to offer SWT3 compliance assessment. Register your interest and we'll notify you when the program opens.
Get your own audit portal with cryptographic evidence, Annex IV checklist, and assessment tools. Free tier includes 90-day anchor retention and up to 1,000 inferences.
Every finding in this report is backed by a cryptographic SWT3 Witness Anchor. Anchors can be independently verified at any time using the public verification endpoint.
Axiom is a neutral evidence platform. It does not grant certifications, issue conformity assessments, or replace the professional judgment of a qualified auditor, Notified Body, or Authorizing Official. Scores, gate decisions, and recommended outcomes are computed deterministically from machine-gathered evidence and are provided for informational purposes only. The final authority on conformity or compliance rests with the designated assessment body and their professional standards.
SWT3 Protocol, Witness Anchor format, UCT Registry, and AI Witness clearing methodology are Patent Pending. © 2026 Tenable Nova LLC. All rights reserved.
| OPEN |
| 96d |
| 9/11/2026 |
| AI-GOV.3 | — | OPEN | 186d | 6/13/2026 (overdue) |
| AI-EXPL.2 | — | OPEN | 187d | 6/12/2026 (overdue) |
| AI-FAIR.2 | — | OPEN | 188d | 6/12/2026 (overdue) |
| AI-GRD.2 | — | OPEN | 189d | 6/11/2026 (overdue) |
| AI-EXPL.1 | — | OPEN | 190d | 6/9/2026 (overdue) |
| AI-HITL.3 | — | OPEN | 192d | 6/7/2026 (overdue) |