Unit of Assurance

UnitOfAssurance,CredibilityEvidencePackage

Cou2

https://uofa.net/iso42001/hybrid/cou2

Described in packs/iso42001/examples/hybrid/cou2/uofa-iso42001-cou2.jsonld

Fields

@type UnitOfAssurance
@type CredibilityEvidencePackage
uofa:synthetic true
uofa:conformsToProfile https://uofa.net/vocab#ProfileMinimal
schema:name Hybrid AIMS evidence — COU2: customer-facing LLM regulatory communication (high risk)
schema:description ISO 42001 AIMS evidence package for COU2 of the iso42001 hybrid case study. Customer-facing LLM application that generates draft responses for regulated communications (financial product disclosures, support responses with regulatory implications). Risk profile: High. Hybrid construction: structural categories anchored in StackAware-style published AIMS materials; supplemental categories (system inventory, full impact assessment, data catalog, model evaluation, deployment config, monitoring metrics, incident response) synthesized to demonstrate dual-output behavior at high assurance level.
uofa:couName COU2: customer-facing LLM regulatory communication drafter
uofa:intendedUse LLM generates draft responses to customer inquiries in regulated communication contexts; human regulator-trained reviewer approves before send.
uofa:assuranceLevel High
uofa:decision Accepted
uofa:modelRiskLevel 4
aims:assessedDeploymentScope Customer-impact, regulatory-compliance, reputational, AND third-party-supplier dimensions
aims:deploymentPopulationCategory customer-comms
aims:deploymentPopulationCategory regulatory-comms
aims:deploymentPopulationCategory internal-policy
aims:deploymentPopulationCategory vendor-comms
uofa:currentModelVersion v1.6.0
prov:generatedAtTime 2026-05-06T00:00:00Z
uofa:hash sha256:0000000000000000000000000000000000000000000000000000000000000000
uofa:signature ed25519:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
uofa:adversarialProvenance
{"generatorVersion":"iso42001-hybrid-cou2-v0.4","toolVersion":"uofa-cli 0.5.0","promptTemplateVersion":"case-study-anchor-v0.1.0","specId":"iso42001-hybrid-cou2","generationTimestamp":"2026-05-06T00:00:00Z","targetWeakener":null,"targetDefeaterType":"case-study","coverageIntent":"case-study-cou2-high-risk","sourceTaxonomy":"case-study/aims/high-risk-regulatory-comms","evidenceGapDescription":"COU2 expected dual output (per spec §2.6.5): larger C3 firing set with multiple high-severity firings (W-AIMS-IMPACT-SCOPE on assessment vs. deployment scope mismatch; W-AIMS-MODEL-EVAL-STALE on v1.4 vs deployed v1.6; W-AIMS-MODEL-EVAL-SCOPE on test set vs deployment population; W-AIMS-DEPLOYMENT-DRIFT on v1.4 vs v1.5 config; W-AIMS-INCIDENT-UNCLOSED on incident-001 lacking RootCauseAnalysis; W-AIMS-ROLE-UNASSIGNED on AIMS Owner and Compliance Officer roles); substantial OOS firings across all 8 rules NOT contextualized — high-risk AI demands independent verification, stakeholder validation, expert RCA review, methodology validation. The dual output names the specific evidence gaps to close."}

References

uofa:bindsRequirement https://uofa.net/iso42001/hybrid/cou2/req
uofa:hasContextOfUse https://uofa.net/iso42001/hybrid/cou2/cou
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/policy
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/scope
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/objective
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/role-aims-owner
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/role-data-steward
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/role-comp-officer
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/risk-register
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/impact-assessment
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/data-prov
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/model-eval
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/deploy-config
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/incident-001
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/audit
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/control-a52
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/control-a624
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/control-a74
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/control-a86
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/control-a102
uofa:hasEvidence https://uofa.net/iso42001/hybrid/cou2/stakeholder-mapping
uofa:bindsClaim https://uofa.net/iso42001/hybrid/cou2/claim/policy
uofa:bindsClaim https://uofa.net/iso42001/hybrid/cou2/claim/risk
uofa:bindsClaim https://uofa.net/iso42001/hybrid/cou2/claim/impact
uofa:bindsClaim https://uofa.net/iso42001/hybrid/cou2/claim/audit
uofa:bindsClaim https://uofa.net/iso42001/hybrid/cou2/claim/rca
uofa:bindsClaim https://uofa.net/iso42001/hybrid/cou2/claim/objective
uofa:bindsClaim https://uofa.net/iso42001/hybrid/cou2/claim/control-a624
uofa:bindsClaim https://uofa.net/iso42001/hybrid/cou2/claim/control-a86
prov:wasDerivedFrom https://uofa.net/iso42001/hybrid/construction-v0.4
prov:wasAttributedTo https://uofa.net/iso42001/hybrid/case-study-author
uofa:hasDecisionRecord https://uofa.net/iso42001/hybrid/cou2/decision
uofa:hasValidationResult https://uofa.net/iso42001/hybrid/cou2/model-eval

Integrity

This identifier names a signed package. Verify it yourself against the record in the repository.

uofa check --build packs/iso42001/examples/hybrid/cou2/uofa-iso42001-cou2.jsonld