UnitOfAssurance,CredibilityEvidencePackage
Cou1
https://uofa.net/iso42001/hybrid/cou1
Described in
packs/iso42001/examples/hybrid/cou1/uofa-iso42001-cou1.jsonld
Fields
@type |
UnitOfAssurance |
@type |
CredibilityEvidencePackage |
uofa:synthetic |
true |
uofa:conformsToProfile |
https://uofa.net/vocab#ProfileMinimal |
schema:name |
Hybrid AIMS evidence — COU1: enterprise LLM-based knowledge retrieval (low risk) |
schema:description |
ISO 42001 AIMS evidence package for COU1 of the iso42001 hybrid case study. Internal employee-facing LLM application that retrieves and summarizes information from the organization's internal knowledge base. Risk profile: Low. Hybrid construction: structural categories anchored in StackAware-style published AIMS materials (AI policy, AIMS scope, risk methodology, impact assessment methodology, SoA structure); supplemental categories (system inventory, data catalog, model evaluation, deployment config, monitoring, incident tracking) synthesized. |
uofa:couName |
COU1: enterprise LLM knowledge retrieval (internal employee assistant) |
uofa:intendedUse |
Internal employees query the assistant for information from the organization's knowledge base. The assistant returns retrieved snippets with citations. |
uofa:assuranceLevel |
Low |
uofa:decision |
Accepted |
uofa:modelRiskLevel |
2 |
prov:generatedAtTime |
2026-05-06T00:00:00Z |
uofa:hash |
sha256:0000000000000000000000000000000000000000000000000000000000000000 |
uofa:signature |
ed25519:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 |
uofa:adversarialProvenance |
{"generatorVersion":"iso42001-hybrid-cou1-v0.4","toolVersion":"uofa-cli 0.5.0","promptTemplateVersion":"case-study-anchor-v0.1.0","specId":"iso42001-hybrid-cou1","generationTimestamp":"2026-05-06T00:00:00Z","targetWeakener":null,"targetDefeaterType":"case-study","coverageIntent":"case-study-cou1-low-risk","sourceTaxonomy":"case-study/aims/low-risk-knowledge-retrieval","evidenceGapDescription":"COU1 expected dual output (per spec §2.6.4): small C3 firing set; OOS firings expected for control-operational-effectiveness (each declared control), policy-appropriateness, audit-independence — but contextualized as appropriate-for-Low-risk per ISO 42001 risk-proportionality. The OOS firings inform the auditor about the next layer of evidence that would be available without claiming the bundle is inadequate for the assurance level being claimed."} |
References
Integrity
This identifier names a signed package. Verify it yourself against the record in the repository.
uofa check --build packs/iso42001/examples/hybrid/cou1/uofa-iso42001-cou1.jsonld