Research / Governance

Govern the production handoff

Create an audit trail for data location, security, service objectives and operating responsibility.

Name the boundary and owner

Define where model weights, inputs, outputs and logs can be stored and processed. Ask how identity, key management, isolation and access logging work. Record which responsibilities belong to the provider, the customer and any integration partner.

Give each evidence item a lifecycle

The NIST AI RMF structures risk work around Govern, Map, Measure and Manage. For an infrastructure evaluation, use explicit evidence, named owners and review dates. An assessment here records the state of evidence and does not certify compliance.

Set operational exit criteria

Agree on the test run, p95 latency at representative traffic, recovery objective, escalation path, version changes and export or deletion requirements. Validate what can move to another environment and document dependencies.

Create a handoff

Use the Evidence Brief Builder to separate documented findings from gaps.