{
  "release": "2026-10-16.scoring.1",
  "importBatchId": "policy-scoring-20261016-v1",
  "seedSha256": "5e3218ff076247566fad229793b44f4cf8d6339a6c9fe5af4001cb74a7c7e3da",
  "counts": {
    "sources": 11,
    "recordVersions": 622,
    "sourceRows": 622,
    "provenance": 622,
    "relationships": 611,
    "ruleScores": 413,
    "uniqueByKind": {
      "guidance": 315,
      "control": 287,
      "scoring_model": 9,
      "framework": 10,
      "reference_bundle": 1
    },
    "versionsByKind": {
      "framework": 10,
      "scoring_model": 9,
      "guidance": 315,
      "control": 287,
      "reference_bundle": 1
    },
    "uploadedMarkdownFiles": 11,
    "unresolvedRelationships": 0
  },
  "manifests": [
    {
      "filename": "POLICY.md",
      "sha256": "e8334126d25759e058d08f458c206d02d37a4b4dc4c2e43d0af75bb10d4ab9ea",
      "sourceKey": "policy-guide-taimscore@e8334126d25759e0",
      "lineCount": 651,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(1).md",
      "sha256": "9134743a099f1dc9504df14d0caa2d77c774e20c8f0badd5d6d431f1e6e92ed6",
      "sourceKey": "policy-guide-chirality-maturity@9134743a099f1dc9",
      "lineCount": 297,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(2).md",
      "sha256": "41d1e97d020a97ab1207da3846558578afdfe59c5f9ccec2b13aa272e8b8dcca",
      "sourceKey": "policy-guide-cmmc@41d1e97d020a97ab",
      "lineCount": 246,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(3).md",
      "sha256": "cea5aa820a0b3f1d18f9da7d6192ad10563e515d3ed4508a69653e918f9d24a0",
      "sourceKey": "policy-guide-dod-ai-ethics@cea5aa820a0b3f1d",
      "lineCount": 272,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(4).md",
      "sha256": "88d519cc9c305e1a3694d2861baa354c68f7b520a2a23d18179d172218f45da5",
      "sourceKey": "policy-guide-eo-14110@88d519cc9c305e1a",
      "lineCount": 490,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(5).md",
      "sha256": "952eee7420eda0a8bdd0629f1b6d7220d92876d7818527e999303020f6e69e75",
      "sourceKey": "policy-guide-eu-ai-act@952eee7420eda0a8",
      "lineCount": 471,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(6).md",
      "sha256": "6bc3eb5520724cd48439a40f1a243f5d7b34774748e0a6e08045c00711f8c478",
      "sourceKey": "policy-guide-fedramp@6bc3eb5520724cd4",
      "lineCount": 297,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(7).md",
      "sha256": "ef8be3fea8d9b33eb033a840cd719abe7ad5f4ffd2bd3a47d2a7484a4deeed32",
      "sourceKey": "policy-guide-iso-42001@ef8be3fea8d9b33e",
      "lineCount": 539,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(8).md",
      "sha256": "4818dbe94063b8d9178c062c689c12fbffc2dbfab47de42a78a8093c819dcb06",
      "sourceKey": "policy-guide-nist-800-53@4818dbe94063b8d9",
      "lineCount": 602,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(9).md",
      "sha256": "aca4e7485fc3b0a9e556f0ee23426fa9eeb2082f7b0e1bcac9b045860fe486a9",
      "sourceKey": "policy-guide-nist-ai-rmf@aca4e7485fc3b0a9",
      "lineCount": 454,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    },
    {
      "filename": "POLICY(10).md",
      "sha256": "3d2cb13d3349744d1bf765e010c889c62bd7007a2ac2e156df14d4cafb2d18e1",
      "sourceKey": "policy-guide-owasp-llm-2025@3d2cb13d3349744d",
      "lineCount": 398,
      "sourceType": "Markdown secondary guidance",
      "duplicateOf": null
    }
  ],
  "scoringSourceCrosswalk": {
    "taimScore": {
      "source": "POLICY.md",
      "lines": [
        494,
        535
      ],
      "controlScale": [
        0,
        4
      ],
      "functionWeights": {
        "GOVERN": 25,
        "MAP": 25,
        "MEASURE": 25,
        "MANAGE": 25
      },
      "use": "Maturity reference; not a runtime safety certification."
    },
    "missionPlanning": {
      "source": "missionSAFE_AI_Control_Enforcement_Baseline_v2.xlsx",
      "sheet": "10 Scoring Model",
      "dimensionRows": [
        6,
        10
      ],
      "weights": [
        20,
        15,
        25,
        20,
        20
      ],
      "gateRows": [
        15,
        21
      ],
      "thresholds": {
        "candidateReady": 85,
        "conditional": 70
      },
      "use": "Proposed scope-bound mission planning model with non-compensating gates."
    },
    "maturityRoadmap": {
      "source": "POLICY(1).md",
      "lines": [
        226,
        258
      ],
      "use": "Separate four-dimension maturity model; its floor(score/20)+1 formula produces 6 at 100 and requires correction before reuse."
    }
  },
  "scoringModel": {
    "version": "cgrcc-mission-score-0.1",
    "status": "PROPOSED_PLANNING_MODEL",
    "calibration": "NOT_EMPIRICALLY_VALIDATED",
    "commonality": {
      "targetFamilies": 5,
      "pointsPerFamily": 20,
      "label": "Observed commonality index",
      "interpretation": "Saturating recurrence index, not percentage prevalence or proof of applicability."
    },
    "priority": {
      "impact": 0.6,
      "exposure": 0.25,
      "commonality": 0.15,
      "includeThreshold": 60,
      "mandatoryOverridesThreshold": true
    },
    "dimensions": [
      {
        "id": "governance",
        "label": "Governance & accountability",
        "weight": 0.2,
        "taimFunctions": [
          "GOVERN"
        ]
      },
      {
        "id": "coverage",
        "label": "Applicable control coverage",
        "weight": 0.15,
        "taimFunctions": [
          "MAP",
          "GOVERN"
        ]
      },
      {
        "id": "enforcement",
        "label": "Enforcement & prevention",
        "weight": 0.25,
        "taimFunctions": [
          "MANAGE",
          "MEASURE"
        ]
      },
      {
        "id": "assurance",
        "label": "Evidence & independent assurance",
        "weight": 0.2,
        "taimFunctions": [
          "MEASURE"
        ]
      },
      {
        "id": "resilience",
        "label": "Monitoring, response & resilience",
        "weight": 0.2,
        "taimFunctions": [
          "MANAGE"
        ]
      }
    ],
    "gates": [
      {
        "id": "G1",
        "label": "Critical-rule coverage",
        "criterion": "All applicable critical rules cover every sanctioned consequential path."
      },
      {
        "id": "G2",
        "label": "Effectiveness thresholds",
        "criterion": "Representative tests meet approved precision, recall, bypass and false-negative limits."
      },
      {
        "id": "G3",
        "label": "High-impact oversight",
        "criterion": "High-impact use cases have an impact assessment, accountable owner, qualified oversight and fail-safe."
      },
      {
        "id": "G4",
        "label": "Critical gaps & incidents",
        "criterion": "No unresolved or unaccepted critical control gap or incident remains."
      },
      {
        "id": "G5",
        "label": "Surface coverage",
        "criterion": "At least 95% of discovered AI use is sanctioned, integrated or blocked with accepted residual risk; the denominator is documented."
      },
      {
        "id": "G6",
        "label": "Response & recovery",
        "criterion": "Kill switch, evidence preservation, incident routing and recovery were tested within the approved period."
      },
      {
        "id": "G7",
        "label": "Outputs & agent actions",
        "criterion": "Materially consequential external outputs and agent actions have covered enforcement boundaries."
      }
    ],
    "readiness": {
      "candidate": 85,
      "conditional": 70,
      "evidenceMaxAgeDays": 90,
      "independentVerificationRequired": true
    },
    "sourceCrosswalk": {
      "missionPlanning": "missionSAFE v2 / 10 Scoring Model / rows 6–10 and 15–21",
      "taim": "POLICY.md / lines 494–535: 0–4 maturity, GOVERN/MAP/MEASURE/MANAGE at 25% each",
      "roadmap": "POLICY(1).md: separate four-dimension maturity roadmap; boundary formula requires correction."
    }
  },
  "notices": [
    "Supplied POLICY.md files are secondary product guidance, not verified publisher text or claims about deployed platform capabilities.",
    "EO 14110 is retained as historical material: official Federal Register records its revocation by EO 14148 on 20 January 2025.",
    "TAIMScore 0–4 maturity, the five-dimension workbook model and mission readiness gates remain distinct.",
    "Commonality is an observed recurrence index; neither frequency nor a planning score establishes legal applicability or safety."
  ]
}