Governance

A model without a kill switch
is not ready.

We use NIST, ISO, and OMB. We do not invent a framework and call it governance.

2022–2024.

Tools shipped with “AI” in the name. Guardrails were a later ticket.

2024–2025.

Hallucinations, leaks, and brittle demos made the cost obvious.

2026.

NIST, ISO, and OMB published enough that “we’ll govern it later” is no longer a plan.

Scattered particles resolving into an ordered grid.
FIG 0.1 — 2022 to 2026

Risk-proportionate
controls.

A prototype is light. A production system that touches rights or safety is not.

NIST AI RMF (GOVERN). ISO/IEC 23894:2023.

A human in the loop,
by tier.

Low-risk work can stay on the loop. Consequential decisions stay in it. Overrides and a kill switch are built in.

NIST AI RMF (MANAGE). OMB M-24-10.

Evaluation
on every change.

Model, prompt, or data refresh trips the same checks: quality, safety, bias, security.

NIST AI RMF (MEASURE). ISO/IEC 5338:2023.

A record.

Who approved what, when, and why. Change logs and incident notes that someone can actually read.

A structural spine holding standards in place.
FIG 0.2 — Four controls, one spine