Methodology
ARI1 is a guided self-audit. You identify an AI use case. ARI1 records answers, review items, and later artifacts. It does not discover systems, scan endpoints, or issue certifications.
Versioned questions
The free assessment uses inventory schema inventory-1.0.0. Changing a completed record creates a new version and requires a reason once decisioning is in production.
Uncertainty
Unknown is a valid answer. It creates a named review item. ARI1 does not invent a missing vendor, contract position, or risk tier from placeholder data.
Mapping by reference
Outputs are mapped by reference to ISO/IEC 42001 and NIST AI RMF. Mapping is not certification, an audit opinion, or a guarantee of regulatory compliance.
Overrides
When a decisioning release is available, human overrides are recorded with a reason and a new version. This assessment wedge records the system and review items only.