Sample ProofPack

Cited decision rationale (sample)

Sample only — not a live classification

Proceed with controls; human review required

• The system drafts customer-support replies from approved knowledge-base content.
• A support agent must review every generated response before it is sent.
• Provider training use is unknown, so it remains a named review item rather than an invented control.
• Outputs are mapped by reference to ISO/IEC 42001 governance clauses and NIST AI RMF govern/map functions. This is not a certification or audit opinion.

Sources

• ISO/IEC 42001:2023 2023 — Mapped by reference for AIMS documentation and accountability evidence
• NIST AI Risk Management Framework 1.0 — Mapped by reference for GOVERN and MAP functions

Artifact manifest

SHA-256 hashes are in the downloaded manifest. Files below are the representative sample.

• system-record.json

  JSON · Versioned system record

• system-record.csv

  CSV · Portable register row

• decision-memo.txt

  Text (DOCX format demonstrated) · Cited decision rationale

• ownership.json

  JSON · Named owners and HITL

• manifest.json

  JSON · Artifact manifest and SHA-256 hashes

Ownership

Business owner

VP Customer Experience

Technical owner

Director of Applications

Human in the loop

Support agent reviews every generated response before sending

Review items

• Review needed · REVIEW_TRAINING_UNKNOWN

  Provider training use is unknown. Confirm the contract or provider setting before treating this record as complete.

• Review needed · REVIEW_TERMS_NOT_REVIEWED

  Provider terms have not been reviewed. This is a named review item, not a completed control.