GxPlex

NIST AI RMF

NIST AI Risk Management Framework 1.0

Recorded status
unknown (basis: person-ratified)
Last person check
— a person confirmed the status this entry publishes
Last observation
Retained text
held — Prose was extracted from the retrieved bytes, so a quotation from this document can be checked against what this record retained.

1 correction names this row · last → history

Evidence coverage#

Of the 12 rungs of this entry’s evidence ladder: 7 held · 0 held in part · 3 read, and not there · 2 nothing held.

The 12 rungs, each with its mark
  1. identity — held
  2. publisher — held
  3. jurisdiction — held
  4. type — read, and not there
  5. current edition — nothing held
  6. publication date — nothing held
  7. lifecycle signal — read, and not there
  8. publisher notices — read, and not there
  9. observation history — held
  10. text — held
  11. diff — held
  12. verification — held

A rung marked nothing held has no recorded reading; one marked read, and not there has a reading that ran and did not find it. Rungs stand in the ladder’s fixed order and the counts in this fixed order of marks: held · held in part · read, and not there · nothing held; neither order says anything about this entry. The counts on /coverage are counted by rules of their own, so a rung here and a count there of one name can differ. The sentence behind each mark is in the evidence ladder, under Evidence.

What this record does not establish#

No conclusion is drawn from absence. An absence here is not evidence that a document does not exist, is not in force, or does not govern.

Of the 12 rungs on this entry, 7 are held, 0 are held in part, and 5 cannot be established from what this record holds. Each of those carries the reading that produced it and whose blank it is. Ordered by whose blank each names: this record’s own first, then the publisher’s, then the blanks this record cannot attribute at all.

  1. type the publisher’s own surface the class the document calls itself, quoted from its own title The title was read and it does not call this document a regulation, a guidance or a standard, so no class is recorded.
  2. current edition this record has not looked a statement of which edition or revision this record holds No reading of an edition or revision statement is recorded for this entry.
  3. publication date this record has not looked a date the publisher states for this document No reading of a publication date is recorded for this entry.
  4. lifecycle signal the publisher’s own surface a stage, step or status wording read from a publisher surface A person enumerated the publisher’s surfaces and none states a status; the enumeration is recorded above and is bounded to the surfaces named.
  5. publisher notices this record cannot tell which official notices the publisher issued about this document A collection of publisher notices has succeeded and none of the records it holds attaches to this entry.

2 this record has not looked — no reading of this rung is recorded here. The blank is this record’s, and it is not evidence about the publisher · 2 the publisher’s own surface — a reading reached a surface the publisher published and what was asked for is not on it, bounded to the surfaces read · 1 this record cannot tell which — what is held does not say whether the blank is the publisher’s or this record’s. This is an absence of an attribution, not a kind of one

Established for this entry: identity · publisher · jurisdiction · observation history · text · diff · verification. Held in part: none of them.

The reading behind every one of those is stated rung by rung in the evidence ladder under Evidence, and the public evidence each was marked from is published in full on this page under Timeline, Publisher neighbourhood, Observation history and Sources.

What this record undertakes for this entry is stated in 6 terms, each answering one question, and each answered for this entry in the coverage contract under Evidence:

  1. Observed cadence: how often this record has reached this entry’s address
  2. Text: public, and retained: whether the publisher’s text is public, and whether prose from it is kept here
  3. Hash: what is digested for this entry, and of what
  4. Status verification: which check this record undertakes for the published status, and which it holds
  5. Lifecycle tracked: which lifecycle facts this record follows for this entry
  6. Known limits: the limits this entry’s own record declares

Overview#

Open primary source (opens in new tab) nist.gov View observation 2026-11-02 · sequence 2

Document status what the publisher asserts, and the status recorded here

Publisher lifecycle field: none captured

No status read is recorded for this entry — this record has not read a publisher surface for its status, which is a fact about this record and not about the publisher. A status read is recorded for 7 of 132 tracked entries, 5 of which banked a passage.

Recorded status: unknown

Verification what a person or a tool has confirmed here, and when

Publisher: US National Institute of Standards and Technology Last checked: Last read:

Evidence state what this record holds

unstated by the publisher — a surface was read and it states no status term this publisher’s family declares; bounded to the surfaces read

How this status is recorded
Recorded
unknown
Established by
A person confirmed this entry on 1 August 2026.
Evidence
In Current status on this page.
Published at
This record names no separate surface for the status. The primary source it holds is the primary source (opens in new tab). This entry's record is published in machine form at /api/v1/instruments.json.

Filed core. For that label this archive undertakes to close an entry's open status question by rule on a clock, with its reason, and to re-read a ratification on record against its observation every night. The label records what this archive undertakes for a class of entries. It states no finding about this one, and it is not a ranking.

Checked, and no status is stated. A person confirmed this against the publisher's own surfaces on 1 August 2026. The enumeration is recorded above and is bounded to the surfaces named — it reports what those pages state, not what exists elsewhere. Consult the primary source (opens in new tab) directly.

Status terms. NOT-STATED: this record declares the NIST status patterns for this source, and none matched the 101,233 characters of text retained on 2026-11-02 from the source this row hashes. (derived 2026-11-02)

Resolution: listing resolved · document resolved to the retrieved document (opens in new tab) nvlpubs.nist.gov

What this archive can and cannot establish about this entry. NIST publishes no draft/final field for this document. Read from the publication itself: page 2 of NIST.AI.100-1 carries 'Artificial Intelligence Risk Management Framework (AI RMF 1.0)', the DOI 10.6028/NIST.AI.100-1 and 'January 2023'. A numbered 1.0 release with a DOI and a publication month is a finished publication. Set by tooling, not confirmed by a person — the record says which.

Authority
US National Institute of Standards and Technology
Jurisdiction
International
Status
unknown
Why no status
no NIST surface states a publication status for AI 100-1. Enumerated publication record (HTTP 200); programme page (HTTP 200); CSRC record (exact phrase) (HTTP 200); CSRC record (direct series URL) (HTTP 404); AI Resource Center (HTTP 200) on 2026-08-01. — confirmed by a person; the enumeration is the evidence, and it is bounded to the surfaces named.
Effective date
— this record holds no effective date for this entry
Last changed
—
Last verified
(person-ratified: a key stands on the status this entry publishes)
Watch cadence
quarterly
Crawlable
yes · renders server-side
Text licence
freely reproducible
Primary source
Primary source (opens in new tab) nist.gov
Topics
risk management

Timeline#

The dated facts this record holds for this entry. Each line below states what one kind of dated fact amounts to here, and links to the list holding it where this entry has one; the list carries the dates, the words and the addresses they were read from. Nothing is counted twice: where a line states a number, the section it names states none.

What is not published. This build serves 3 address(es) holding a time-ordered list for an entry — a TimeMap in JSON, its link-format sibling and an index — each expanding to one document per tracked entry. What they list is CAPTURES of this entry’s source held at a web archive, carrying that archive’s own capture instants; this record serves no copy of a tracked document, so none of those addresses is one of this record’s, and a capture address is published only where the terms filing recorded for the source host permits it. This entry’s own is at /api/v1/timemap/nist-ai-rmf.json. The route set naming them, and what each one answers, is published at /developers.

Change history#

Publisher neighbourhood#

What sits around this entry, counted. Every figure below is drawn from a value already rendered elsewhere on this page; where a count has a list, the count is here and the list stays in the section holding its evidence.

The direct document, and the activity around it what this record’s observations of the document recorded inside a stated window, beside the official signals dated inside the same one
Each row is a window of calendar days ending , the day the source-health block below counts its own window to. Every column between the window and the official signals is drawn from the 53 observation(s) of the document this entry holds in total. An observation is counted here only where the class projection places it on the document this entry names.
Window Observations of the document Of those, carrying a digest Of those, carrying a change Direct document Official signals dated inside it
30 calendar days 31 31 0 no detected difference in window not measured
90 calendar days 53 53 0 no detected difference in window not measured
365 calendar days 53 53 0 no detected difference in window not measured

A window is marked changed where at least one observation of the document inside it recorded a change against the previous one; unchanged where the window holds at least one such observation, at least one of them carries a digest of the retrieved bytes, and none recorded a change; undigested where the window holds observations and none of them carries a digest, so no observation in it could be compared with another; and unmeasured where the window holds no observation at all. The word is shorthand for the three counts printed beside it and adds nothing to them. It is a statement about the window and never about the document outside it, which is why a window reaching back before the first observation says so underneath. A mark is derived from the observations a window holds and never from the days it spans; which days inside this entry’s own window hold none is stated by the coverage sentence in Observation history below.

The first observation of the document this entry names is . These windows reach back before it — 90 calendar days · 365 calendar days — so part of the span each names was never watched, and a window with no detected difference inside it says nothing about the days before that first observation.

no detected difference in window — this window holds observations of the document and none of them recorded a change — which is a statement about the window, not about the document outside it

No word is attached to the signal count beside it, and none will be. Any word for the size of a count needs either a threshold this record would have authored or a comparison against other entries that would rank the sources against one another; the count and its window are the whole claim. The document column beside it carries a word only because the rule reaching it is printed underneath and can be checked against the counts it stands for.

The last column holds no member on this entry. The zero it holds is named under “Around it” below.

Around it official signals naming this entry, by the class their publisher stated
— 88 of the 88 record(s) the store holds could be tested against this entry, and none names it. That zero is a measurement.
Related sources other entries reachable from this one by a relation a publisher states
0 relation(s) this entry’s own publisher states, 2 citation edge(s) out of its retained text and 5 into it. They reach 3 other entry(ies) this record tracks. Each one is listed with the words that state it and the address they were read from, in the section holding it below.
Related standards which of those entries call themselves a standard, in their own publisher’s word
Of the 3 entry(ies) reached, 0 carry their publisher’s word for a consensus standard, 0 state another class and 3 state none. A related entry is counted as a standard only where that entry’s own record carries the publisher’s word for it, quoted and cited on that entry’s page. Nothing is read from a designator: a title containing the letters of a standards body is not a publisher calling a document a standard. Where an entry states no class, it is counted as stating none rather than as not being one.
Topics record identifiers for publisher-stated values, and the voice each one is in
1 identifier(s), minted by the convention published at /conventions. The values themselves are not listed again here; what this adds is the identifier and the voice it is in. 1 come(s) from a term this document’s own publisher states about it, quoted with its citation lower on this page: topic.risk-management.
Before, now and next where the record’s day sits among the publisher-dated facts this entry holds
— This entry holds no publisher-dated lifecycle fact, so no position can be derived. What is absent is a dated statement this record has read.

Next holds the publisher-dated facts this record already carries that fall after the day this record calls today — a stated effective date, a consultation close. Nothing is projected and no step is inferred from a lifecycle: where a publisher has stated no further date, the cell says so, and what is absent is a statement rather than a future.

Subject and class (as stated)

The words this document uses about itself, matched verbatim against its own title. Not a statement of scope, and not a judgment about which organisations or products fall under it: each value quotes the span it was read from and links to where that span was read.

This document does not call itself a regulation, a guidance or a standard, so no class is recorded. It is filed under title states no class.

Citations (within the tracked corpus)

One document's retained text contained a form another document is published under, on the date shown, with the words it was read from. An edge cannot tell the manner of a citation — a document naming another in order to exclude it produces the same entry as one adopting it.

publisher-stated citation relationships — not a regulatory applicability determination The policy, stated once

Cites (as published)

These citations are drawn together on the citation graph, where every row carries the same quote and source.

Cited by (within the tracked corpus)

Family (along publisher-stated edges)

A family forms only along a supersedes, superseded-by or document-history line a publisher prints. A shared title, number, date or prefix forms none. This records what one document's publisher lists about another and states nothing about the relationship between their requirements.

In no family. No store this record fills holds a supersedes, superseded-by or document-history field naming a second document for this entry, so whether its publisher prints such a line is unmeasured.

Shared publisher terms

No term in the index lists this entry.

Terms retired from the index that had listed this entry. Each address says which text did not hold the words.

contextual mapping — not a regulatory applicability determination The policy, stated once

Evidence#

Current status#

No status has been confirmed against the primary source. Recorded as unknown rather than estimated.

What is not known#

The source was retrieved, but no phrase stating a regulatory status was found near a mention of this instrument.

Evidence ladder#

What this record holds for this entry, rung by rung, each mark derived from a field, a count or a stored reading. Rungs in the order the record acquires them, from what an entry is to what has been checked about it. The order is fixed; a rung’s position says nothing about any entry.

The 12 rungs, as marked for this entry
  1. held. identity an address that describes this document rather than a list it sits in This record holds an address that describes this document, and the names it is published under.
  2. held. publisher the body that published it The publishing body is recorded as US National Institute of Standards and Technology.
  3. held. jurisdiction the jurisdiction the publishing body belongs to The jurisdiction is recorded as International.
  4. read, and not there. type the class the document calls itself, quoted from its own title The title was read and it does not call this document a regulation, a guidance or a standard, so no class is recorded.
  5. nothing held. current edition a statement of which edition or revision this record holds No reading of an edition or revision statement is recorded for this entry.
  6. nothing held. publication date a date the publisher states for this document No reading of a publication date is recorded for this entry.
  7. read, and not there. lifecycle signal a stage, step or status wording read from a publisher surface A person enumerated the publisher’s surfaces and none states a status; the enumeration is recorded above and is bounded to the surfaces named.
  8. read, and not there. publisher notices official notices the publisher issued about this document A collection of publisher notices has succeeded and none of the records it holds attaches to this entry.
  9. held. observation history a dated series of what the publisher’s address returned This record holds 53 dated records of this document, of 252 records in its series; the rest are classified as records of something other than the document this entry names.
  10. held. text prose retained from the retrieved bytes, against which a quotation can be checked Prose was extracted from the retrieved bytes, so a quotation from this document can be checked against what this record retained.
  11. held. diff a comparison of two retrievals of this document 1 change candidate is staged for it.
  12. held. verification a person’s check of this entry against the primary source A person checked this entry against the primary source; the day is recorded above.

✓ held — this record holds it, and the sentence beside it names what from · ✗ read, and not there — a reading ran and did not find it — an absence this record measured · — nothing held — no reading of this rung is recorded — nobody has looked, which is not the same as looking and finding nothing

The first rung a reading ran on and did not find: type — The title was read and it does not call this document a regulation, a guidance or a standard, so no class is recorded.

What the evidence states

  • This record holds an address that describes this document, and the names it is published under.
  • The publishing body is recorded as US National Institute of Standards and Technology.
  • The jurisdiction is recorded as International.
  • This record holds 53 dated records of this document, of 252 records in its series; the rest are classified as records of something other than the document this entry names.
  • Prose was extracted from the retrieved bytes, so a quotation from this document can be checked against what this record retained.
  • 1 change candidate is staged for it.
  • A person checked this entry against the primary source; the day is recorded above.

What it does not state

  • The title was read and it does not call this document a regulation, a guidance or a standard, so no class is recorded.
  • No reading of an edition or revision statement is recorded for this entry.
  • No reading of a publication date is recorded for this entry.
  • A person enumerated the publisher’s surfaces and none states a status; the enumeration is recorded above and is bounded to the surfaces named.
  • A collection of publisher notices has succeeded and none of the records it holds attaches to this entry.

Evidence states#

All 8 evidence states, marked against this entry’s own fields. The axis at the top of this page publishes the first of them this entry meets; a state it meets after that is marked as met and not carried, because a state an entry meets and does not carry is not the same fact as one it fails. 7 of the 8 come from the published model and 1 was recorded here. The order, and why it is not a ranking, is stated on the observatory.

  1. not a document not met a body, committee or programme — there is no document here to retrieve, quote or date The object model records this entry’s own type as document.
  2. a register not met retrieved and hashed daily; the tier promises no person-verification The record tier this entry declares is core and its freeze reason is not recorded.
  3. unstated by the publisher carried a surface was read and it states no status term this publisher’s family declares; bounded to the surfaces read This entry carries a status basis — the surfaces a person enumerated and what each of them states.
  4. verified by a person (person-ratified) also true a person checked this entry against the primary source on a recorded day This entry records the check as made by a person: checked_by reads human.
  5. source access limited not met the publisher’s licence or its access policy limits what this record takes from the source The freeze reason this entry declares is not recorded, its licence class is open, and its record of whether the publisher excludes automated clients reads false.
  6. publisher metadata not met what is held is metadata the publisher publishes about the document — a catalogue entry or a stage record — not the document The resolution strategy this entry declares is listing_resolved, what its address points at is declared as document, and no stage the publisher publishes is held for it.
  7. observed also true the document at the address the publisher answered is retrieved and hashed here on a dated series This record holds 53 dated retrievals of the document this entry names, each carrying a digest.
  8. not currently retrievable not met no retrieval of the document this entry names has produced a digest 53 dated retrievals of the document this entry names have produced a digest here.

◆ carried — the entry meets this test and no state before it in the order does, so this is the state its evidence axis publishes · ◇ also true — the entry meets this test as well, and the axis publishes a state that comes before it in the order · × not met — the entry does not meet this test, and the line beside it names what was read

Coverage contract#

Each term states what this record does for this entry and what it does not, derived from the entry’s own fields and its own series. It is a record of coverage, not a finding about the document.

Observed cadence how often this record has reached this entry’s address
Every interval between consecutive days holding an observation is 1 day. The term this record declares for the entry is “quarterly”.
Text: public, and retained whether the publisher’s text is public, and whether prose from it is kept here
The publisher’s text is freely reproducible. Prose is retained from the retrieved bytes, so a quotation can be checked against it.
Hash what is digested for this entry, and of what
53 of 53 record(s) classified as being of the document this entry names carry a digest of the retrieved bytes; the entry’s whole series holds 252 record(s), and the rest are classified as records of something other than that document.
Status verification which check this record undertakes for the published status, and which it holds
This entry’s label undertakes to close an open status question by rule on a clock, with its reason, and to re-read a ratification on record against its observation every night. A person’s confirmation is recorded, dated 2026-08-01.
Lifecycle tracked which lifecycle facts this record follows for this entry
This record follows no lifecycle fact for this entry: no effective date, no dated event, no archived version, no publisher stage record and no detected revision is held. That is what has been recorded here, not a reading of what exists. 36 of 132 tracked entries carry at least one such fact.
Known limits the limits this entry’s own record declares
None of the 8 limits this record can record is set on this entry. That is an absence of declared limits, and not a finding that the entry has none.

Why this entry is tracked#

The test an entry is admitted under is published in full, with its negative limb and its worked examples, at the inclusion rule. What this record holds about THIS entry's admission is below, each line naming the store it was read from.

Inclusion-rule limb which of the four limbs was applied
— No field in this record names which limb an entry satisfies, so none is stated for this one. Membership was closed as a human judgment on 2026-08-11, and the four-limb test is applied by a person rather than by code. This entry’s own stated subject is not read as a limb: a title word standing in for a rule would be a classification this record authored.
Admission entry the dated act that added this entry
— No admission entry is recorded for this entry. 21 of 132 tracked entries carry one, so an absence here is ordinary rather than a gap peculiar to this entry.
Declared tier-1 list a recorded judgement that this belongs
This entry is not a member of the declared tier-1 list. That list names 37 identifiers, of which 35 resolve to one of the 132 tracked entries, so most of the corpus sits outside it and non-membership says nothing about this entry on its own.
Admissions boundary the jurisdictions this record adds from
This entry’s jurisdiction is International. It is inside the admissions boundary ruled on 2026-08-16, which names 4 jurisdictions — EU · US · UK · International — and which is one of the two admission tests this record enforces in code. The other is that a candidate carry the publisher’s own address: a mention is not a citation.

Observation history#

Observed on 252 occasion(s) since 2026-07-28. 252 produced a content hash. 1 observation(s) are marked ! (digest differed).

································································································!···························································································································································

All 252 marks, one per observation, oldest first. · unchanged · ! digest differed · ~ fetched but rendered client-side, no hash · × could not be fetched, no hash · / withheld by the publisher’s terms — no fetch made.

Every one of the 98 days from 2026-07-28 to 2026-11-02 holds an observation.

Each mark links to the single observation it stands for, at that observation’s own address. The whole series, with every address, is at /observations/nist-ai-rmf. Any two of its retained observations can be set side by side at /compare/nist-ai-rmf. The same evidence as a packet, with its refusals and its integrity reference, is at /packet/nist-ai-rmf.

Every observation in this series is published, untruncated, at /api/v1/observations.json.

Of the retrievals classified as this document: same digest on 48 observed days, 2026-09-07 to 2026-11-02 (53 retrievals); 9 of the 57 calendar days in that span hold no digest of this document and are not counted; no earlier digest of this document is recorded. This states what this record retrieved and normalised on those days, and nothing about the document on any other day.

First observed
2026-07-28
Last observed
2026-11-02 (HTTP 200)
Fetch method
direct
Current hash
4c10dc03228b3aefe0ce1ddac9dd23c2252ef25a19c1521e8231a2d23bd797e3
How this series is recorded
Recorded
observations: 252 · carrying a digest: 252 · marked ! (digest differed): 1 · first observed: 2026-07-28
Method
resolution: listing resolved · watch cadence: quarterly · last fetch method: direct
Evidence
The most recent record is addressed at 2026-11-02·2.
Published at
/observations/nist-ai-rmf — every record of this row, with its address. /api/v1/series.jsonl — the same records for every row, one line each. Each observation is addressed by this row’s identifier, the date it was observed, and its sequence within that date — the same key /api/v1/series.jsonl publishes as `sequence`, counted in the order the store recorded them.
SHA-256: 4c10dc03228b3aefe0ce1ddac9dd23c2252ef25a19c1521e8231a2d23bd797e3 This digest is a leaf of the integrity root, and the command that recomputes it is published at /verify/.

Clauses, definitions and sentences (as printed)#

Each string below is the string served for this entry at /api/v1/clause-anchors.json, /api/v1/definitions.json and /api/v1/modal-sentences.json, one block per observed text, each named by the first 12 characters of its content_hash as the JSON serves it: each clause anchor's id beside its label as the text prints it, each definition's term with its text where the derivation quotes it, and each sentence printing a listed verb that sits under the quote cap. A sentence or definition text over the cap is not cut: it is cited by the clause anchor it sits under, or by the stored reason no anchor is placed, its text withheld, and the count withheld is printed beside the count read. The block of the current text, where one is marked, is the one shown open.

Text 8afebcc0941a, first observed 2026-07-28

Clause anchors: no numbering read; 0 placed and 0 withheld.

Definitions: served for the current text of an entry only.

Sentences printing a listed verb: 0 read in this text, 0 quoted and 0 withheld.

Text c240f2675bd3, first observed 2026-08-14

Clause anchors: no numbering read; 0 placed and 0 withheld.

Definitions: served for the current text of an entry only.

Sentences printing a listed verb: 0 read in this text, 0 quoted and 0 withheld.

Text 4c10dc03228b (current text), first observed 2026-09-07

Clause anchors: read; 27 placed and 0 withheld.

  • 1 1.
  • 1.1 1.1
  • 1.2 1.2
  • 1.2.1 1.2.1
  • 1.2.2 1.2.2
  • 1.2.3 1.2.3
  • 1.2.4 1.2.4
  • 2 2.
  • 3 3.
  • 3.1 3.1
  • 3.2 3.2
  • 3.3 3.3
  • 3.4 3.4
  • 3.5 3.5
  • 3.6 3.6
  • 3.7 3.7
  • 4 4.
  • 5 5.
  • 5.1 5.1
  • 5.2 5.2
  • 5.3 5.3
  • 5.4 5.4
  • 6 6.
  • 7 7.
  • 8 8.
  • 9 9.
  • 10 10.

Definitions: 0 read in this text, 0 with the text quoted and 0 with the text withheld.

Sentences printing a listed verb: 76 read in this text, 21 quoted and 55 withheld.

  • 1.2.1 Such deployers may not recognize that their particularusescouldentailriskswhichdifferfromthoseperceivedbytheinitialdeveloper.
  • 1.2.2 Where established guidelines do not exist, organizations should definereasonablerisktolerance.
  • 1.2.3 Policies and resources should be prioritizedbasedontheassessedrisklevelandpotentialimpactofanAIsystem.
  • 1.2.4 1.2.4 OrganizationalIntegrationandManagementofRisk AI risks should not be considered in isolation.
  • 1.2.4 AI risk management should be integrated and incorporated into broader enterprise riskmanagementstrategiesandprocesses.
  • 2 These AI actors may in- cludetradeassociations,standardsdevelopingorganizations,researchers,advocacygroups, Page9 NISTAI100-1 AIRMF1.0 Fig.2.
  • 3.1 Accuracy measurements may include disaggregation of results for different data segments.
  • 3.4 Measures to enhance transparency and accountability should also consider the impact of theseeffortsontheimplementingentity,includingthelevelofnecessaryresourcesandthe needtosafeguardproprietaryinformation.
  • 3.4 Training data may also be subject to copyright and should follow applicable intellectual propertyrightslaws.
  • 5 Risk management should be continuous, timely, and performed throughout the AI system lifecycle dimensions.
  • 5.1 Aspectsof GOVERN,especiallythoserelatedto compliance or evaluation, should be integrated into each of the other functions.
  • 5.2 MAP 1.6: System requirements (e.g., “the system shall respect theprivacyofitsusers”)areelicitedfromandunderstoodbyrel- evant AI actors.
  • 5.3 AI systems should be tested before their deployment and regu- larly while in operation.
  • 5.3 Options may include recalibration, impact mitigation,orremovalofthesystemfromdesign,development,production,oruse,aswell asarangeofcompensating,detective,deterrent,directive,andrecoverycontrols.
  • 5.3 New types of measurement, qualitative and quantitative, may need to be developed.
  • 6 The technologies acquired from third-party entities may be complex or opaque, and risk tolerancesmaynotalignwiththedeployingoroperatingorganization.
  • 6 Technology advances should be monitored and deployed to take advantage of those devel- opmentsandworktowardsafutureofAIthatisbothtrustworthyandresponsible.
  • 6 This loss of context may in turn make it difficult to understandindividualandsocietalimpactsthatarekeytoAIriskmanagementefforts.
  • 6 Other systems may specifically requirehumanoversight.
  • 6 All stakeholders should have the opportunity to contribute to the AI RMF’sdevelopment.
  • 6 It should be consistent or aligned withotherapproachestomanagingAIrisks.
  • (no clause anchor before this sentence) 1 withheld: over the quote cap
  • 1.2.1 2 withheld: over the quote cap
  • 1.2.2 4 withheld: over the quote cap
  • 1.2.3 3 withheld: over the quote cap
  • 1.2.4 4 withheld: over the quote cap
  • 3 1 withheld: over the quote cap
  • 3.1 4 withheld: over the quote cap
  • 3.2 3 withheld: over the quote cap
  • 3.3 2 withheld: over the quote cap
  • 3.4 2 withheld: over the quote cap
  • 3.5 1 withheld: over the quote cap
  • 3.6 1 withheld: over the quote cap
  • 3.7 1 withheld: over the quote cap
  • 5 5 withheld: over the quote cap
  • 5.1 1 withheld: over the quote cap
  • 5.2 4 withheld: over the quote cap
  • 5.3 2 withheld: over the quote cap
  • 6 10 withheld: over the quote cap
  • 6 1 withheld: prints a word Program 4 head A3's word rule refuses
  • 6 2 withheld: over the quote cap
  • 9 1 withheld: over the quote cap

Source health#

Counts and dates over a stated window. No figure here is a mark out of a hundred, no cell is ordered against another, and none of it is a statement about the publisher: a day this record did not reach is a fact about this record’s reach.

Fetch outcomes how the requests in the window answered
193 of 193 fetch records in the 90 calendar days ending carry no error.
Last fetched the most recent record in the whole series
— the latest day this record holds (). The method recorded is direct. What that record returned is in Observation history above.
Address stability where the requests actually landed
193 record(s) in the window recorded the address that answered, across 2 distinct address(es). The most recent answered address is the one this entry declares.
  • https://www.nist.gov/itl/ai-risk-management-framework 140 record(s), 2026-08-05 to 2026-11-02
  • https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf 53 record(s), 2026-09-07 to 2026-11-02
Access posture what the publisher declares, and what the requests met
Declared: no AI-specific disallow · crawlable yes · renders server-side. Met: no request was recorded as refused, over 193 record(s) in the window. A refusal is what one request of this record met on one day; it is not a policy the publisher stated.
Expected and observed cadence the declared term, the days held, and the days holding none
The term this record declares for this entry is quarterly. Over its own window, to , 98 of 98 calendar days hold at least one observation. None holds none. Every interval between consecutive days holding one is 1, counted in days. Both figures are stated and the difference between them is not adjudicated here.
Days by outcome each day of the document's window, by what the store holds for it
57 calendar days expected, 2026-09-07 to 2026-11-02 · 48 observed (48 digest-bearing, 0 retrieval failed) · 0 withheld · 9 no request recorded. On 9 of the days with no request recorded, another address of this entry was read.
  • to , 5 days with no request recorded ; another address of this entry was read on each : The step that reads the address of the document each of these entries declares had been run once, by hand, on 2026-09-07, and the nightly run did not call it. On each of these nights the nightly read another address of the entry and not the document's. The step joined the nightly on 2026-09-12 and first ran there on 2026-09-13. The same days on the corrections page.
  • to , 4 days with no request recorded ; another address of this entry was read on each : The step ran on each of these nights and fetched each document, and every record it tried to write was refused. From 2026-09-13 the store accepted a write only from a caller marked as the collection pass, and this step had not been given the mark. The daily log records the step as ok on every one of these nights, because a refused write did not fail the step. The step was given the mark on 2026-09-18, when an attended run wrote that day's reading of all nine. The same days on the corrections page.
  • calendar days expected — one for each calendar day from the first observation classed as the document to the last day the store holds, because the collection is scheduled once a night; not the entry’s declared watch cadence
  • observed — a request for the document is recorded that day, and its record does not state that it was withheld or never left this machine
  • digest-bearing — a digest of the document is recorded that day
  • checked, unchanged (publisher-validator) — observed, and no digest of the document is recorded that day: the request carried an earlier reading’s validator and the server answered 304 “not modified”, which the record keeps as its outcome and basis; stated on a row only where the row has such a day
  • retrieval failed — observed, and no digest of the document is recorded that day
  • withheld — the day’s requests for the document are recorded as withheld, because the host’s filed terms withhold collection; none was sent
  • not sent, name unresolved here — the day’s requests for the document are recorded as never leaving this machine, because the host’s name did not resolve on it; attributable to this record, not to the host; stated on a row only where the row has such a day
  • no request recorded — no request for the document is recorded that day. This states what the store holds, not that no request was sent: the corrections page names the cause of each run of such days, including runs on which requests were sent and their records were not written

API and citation#

Cite this entry

Each format carries the permalink and the date this entry was observed. The observation date is part of the citation: the underlying source may have changed since.

Plain text

GxPlex. NIST AI Risk Management Framework 1.0 [entry record]. Observed 2 November 2026. https://gxplex.com/r/nist-ai-rmf Primary source: https://www.nist.gov/itl/ai-risk-management-framework

BibTeX

@misc{gxplexrnistairmf,
  author       = {{GxPlex}},
  title        = {{NIST AI Risk Management Framework 1.0}},
  year         = {2026},
  note         = {entry record, observed 2 November 2026},
  howpublished = {\url{https://gxplex.com/r/nist-ai-rmf}},
  urldate      = {2026-11-02},
  url          = {https://www.nist.gov/itl/ai-risk-management-framework}
}

APA

GxPlex. (2026). NIST AI Risk Management Framework 1.0 [entry record]. Retrieved 2 November 2026, from https://gxplex.com/r/nist-ai-rmf

JSON

{
  "@context": "https://schema.org",
  "@type": "Dataset",
  "name": "NIST AI Risk Management Framework 1.0",
  "publisher": "GxPlex",
  "url": "https://gxplex.com/r/nist-ai-rmf",
  "temporalCoverage": "2026-11-02",
  "observation": {
    "url": "https://gxplex.com/observations/nist-ai-rmf#obs-2026-11-02-2",
    "observedDate": "2026-11-02",
    "sha256": "4c10dc03228b3aefe0ce1ddac9dd23c2252ef25a19c1521e8231a2d23bd797e3",
    "verifiedAt": "https://gxplex.com/verify"
  },
  "isBasedOn": "https://www.nist.gov/itl/ai-risk-management-framework"
}

observation.url addresses the single observation this citation rests on.

Every observation of this document is addressed and separately citable at the observation series.

Rights envelope — how this record handles the text of each entry listed
Entrytext_retainedlicence_classquote_allowedsnapshot_available
NIST AI RMFtrueopentruetrue
NIST AI 600-1trueopentruetrue
NIST AI RMF Playbooktrueopentruetrue

One row for the entry this page records, and one for each citing document whose words are quoted under “Cited by”.

Each value is read by the same function the API reads, and each field is defined in the published schema. None of the four is a grant.

Sources#

Listed primary first, then the further addresses this record holds for this entry, then the route it was found by, then dated third-party copies. Repeated URLs appear once, at their first position.

Last updated: