Reference
Framework mappings
- Document
- aiqt.ai
- Version
- AIQT 1.0.5
- Status
- Published; 1.1.0 in development
- Licence
- Apache 2.0, see NOTICE
At a glance
17frameworks
105rules mapped
17reverse views
Registry
Register 1Framework registry17 rows
| Framework | Publisher | Edition | Relation | Edition stability | Identifiers referenced |
|---|---|---|---|---|---|
| CSA AI Controls Matrix | Cloud Security Alliance | 1.1.0 | supports control | stable | 79 referenced (curated subset) |
| CSA Cloud Controls Matrix | Cloud Security Alliance | 4.1.0 | supports control | stable | 57 referenced (curated subset) |
| ISO/IEC 23894:2023 AI guidance on risk management | ISO/IEC | 2023 | aligns with guidance | stable | 14 referenced (curated subset) |
| ISO/IEC 42001:2023 AI management system | ISO/IEC | 2023 | supports control | stable | 18 referenced (curated subset) |
| MITRE ATLAS | MITRE | 2026.06 | mitigates technique | snapshot | 67 referenced (curated subset) |
| MITRE CWE | MITRE | 4.20 | mitigates weakness | snapshot | 72 referenced (curated subset) |
| NIST SP 800-53 Security and Privacy Controls | NIST | Rev 5 (catalog 5.2.0) | supports control | stable | 67 referenced (curated subset) |
| NIST AI Risk Management Framework | NIST | 1.0 (NIST AI 100-1) | aligns with guidance | stable | 24 referenced (curated subset) |
| NIST Secure Software Development Framework | NIST | 1.1 (SP 800-218) | supports control | stable | 20 referenced (curated subset) |
| OWASP API Security Top 10 | OWASP Foundation | 2023 | addresses risk | stable | 8 referenced (curated subset) |
| OWASP Top 10 for Agentic Applications | OWASP Foundation | 2026 | addresses risk | stable | 9 referenced (curated subset) |
| OWASP Application Security Verification Standard | OWASP Foundation | 5.0.0 | supports control | stable | 13 referenced (curated subset) |
| OWASP Cheat Sheet Series | OWASP Foundation | commit f54d8de (2026-07-04) | aligns with guidance | snapshot | 27 referenced (curated subset) |
| OWASP Top 10 for LLM Applications | OWASP Foundation | 2026 | addresses risk | stable | 10 of 10 |
| OWASP MCP Top 10 | OWASP Foundation | 2025 | addresses risk | beta | 10 of 10 |
| OWASP Top 10 Proactive Controls | OWASP Foundation | 4.0.0 | supports control | stable | 9 referenced (curated subset) |
| OWASP Top 10 (Web Application Security Risks) | OWASP Foundation | 2025 | addresses risk | stable | 10 of 10 |
Forward view
By rule
Every rule that carries at least one mapping, in AIQT priority order. Open a rule to see the frameworks it maps to and the identifiers under each, with the fit noted in parentheses.
Claims about the work rest on observation
View this rule on GitHub (opens in a new tab)
- ISO/IEC 23894:2023 AI guidance on risk management (2023): aligns with guidance
- A.12: Transparency and explainability (broad)
- NIST AI Risk Management Framework (1.0 (NIST AI 100-1)): aligns with guidance
- GOVERN 4.1: Organizational policies and practices are in place to foster a critical thinking and safety-first mindset. (broad)
A completeness claim enumerates its set
View this rule on GitHub (opens in a new tab)
- ISO/IEC 23894:2023 AI guidance on risk management (2023): aligns with guidance
- A.12: Transparency and explainability (broad)
- NIST AI Risk Management Framework (1.0 (NIST AI 100-1)): aligns with guidance
- GOVERN 4.1: Organizational policies and practices are in place to foster a critical thinking and safety-first mindset. (broad)
Corroborate external claims
View this rule on GitHub (opens in a new tab)
- MITRE ATLAS (2026.06): mitigates technique
- AML.T0067.000: Citations (tight)
- NIST AI Risk Management Framework (1.0 (NIST AI 100-1)): aligns with guidance
- GOVERN 4.1: Organizational policies and practices are in place to foster a critical thinking and safety-first mindset. (broad)
- MEASURE 2.9: The AI model is explained, validated, and documented, and AI system output is interpreted within its context. (broad)
- OWASP Top 10 for LLM Applications (2026): addresses risk
- LLM07: Misinformation (tight)
Enforcement register
Enforcement register
The register links each rule to the shipped controls that cite it. The live page is 692 KB; the first 9 rows are shown.
Register, excerpt
Register 2Enforcement register, first rowsfirst 9 rows
| Rule | Corpus ID | Status | Linked controls or planned build |
|---|---|---|---|
| The AIQT principle (highest precedence) | prjint1 | No control | No shipped control cites this rule. |
| Citation only from a file opened at the reviewed commit | citint | No control | No shipped control cites this rule. |
| Claims about the work rest on observation | clmobs | No control | No shipped control cites this rule. |
| A completeness claim enumerates its set | setcmp | Hook-linked | hook:orch-stop-guard, class b; hook:orch-teammate-idle-guard, class b; hook:orch-yield-tool-guard, class b |
| Corroborate external claims | corrob | No control | No shipped control cites this rule. |
| A count carries its predicate | cntprd | No control | No shipped control cites this rule. |
| Disclose a guard's residual coverage | dscres | No control | No shipped control cites this rule. |
| Evidence-grounded completion | evgcmp | Gate-linked (class a) | gate:selftest-execution, class a |
| A guard is only as good as its input | grdinp | Gate-linked (class a) | gate:aei-enumerator-selftest, class a; gate:derived-command-parameters, class c |