Glossary

• Bring Your Own Data checked by automation only
  The pattern of encoding institutional governance data in the AI Risk Ontology schema so it is served alongside the public frameworks.

• Control / Action checked by automation only
  The mitigation side of the model - what an organisation does or deploys against a risk; served by the /control and /action endpoints.

• Crosswalk checked by automation only
  A generated mapping of equivalent concepts across two taxonomies, replacing hand-built spreadsheet crosswalks.

• Evaluation checked by automation only, still a draft
  A benchmark or test measuring a risk or a capability, linked to its datasets and tasks; served by the /evaluation endpoint.

• Incident checked by automation only, still a draft
  A documented occurrence of a risk, carrying its source and linked back to the risks it demonstrates; served by the /incident endpoint.

• Obligation checked by automation only
  A framework-imposed requirement together with the evidence categories that demonstrate compliance; served by the /obligation endpoint.

• Risk checked by automation only
  A named, identified harm carrying a persistent identifier, defined by one taxonomy and mappable to equivalents in others.

• Taxonomy checked by automation only
  A framework’s catalogue of risks and controls, and the unit each BYOD data file and each --isDefinedByTaxonomy query is scoped to.