1const e=`<article class="markdown-body"><p>The NIST AI Risk Management Framework is the most widely adopted voluntary AI governance reference in the United States and a common pointer in vendor agreements outside it. It is not a <a href="/glossary#checklist" class="glossary-link" data-glossary-term="checklist">checklist</a>; it is a structured set of outcomes organized into four functions (Govern, Map, Measure, Manage) with seven cross-cutting characteristics for trustworthy AI <sup><a href="#user-content-fn-nist-ai-rmf" id="user-content-fnref-nist-ai-rmf" data-footnote-ref="" aria-describedby="footnote-label">1</a></sup>. The reason this page exists is that the framework's vocabulary is the lingua franca for AI governance conversations in 2026, and the most useful artifact your team can produce is a cross-walk from RMF outcomes to your existing eval activities.</p> 2<p>The one-line version of that cross-walk: each function reduces to a small bundle of eval artifacts.</p> 3<pre class="mermaid-source" data-language="mermaid">flowchart LR 4 G[Govern] --> GA["Eval ownership + release-gate policy"] 5 M[Map] --> MA["Use-case inventory + risk register"] 6 ME[Measure] --> MEA["Standing eval suite + safety benchmarks"] 7 MG[Manage] --> MGA["Incident response + post-market monitoring"]</pre> 8<h2 id="the-four-functions-with-eval-cross-walk">The four functions, with eval cross-walk</h2> 9<p>The mapping below uses NIST's RMF 1.0 function names. NIST says RMF 1.0 is being revised as part of the White House AI Action Plan, and as of October 2026 the framework page still points to 1.0 with no revised text published <sup><a href="#user-content-fn-nist-ai-rmf" id="user-content-fnref-nist-ai-rmf-2" data-footnote-ref="" aria-describedby="footnote-label">1</a></sup>. Key your cross-walk to the 1.0 subcategory IDs and budget one re-map pass for when the revision lands. The "Eval activity" column maps each function to the work your team is likely already doing or planning, with the page on this site that covers it where applicable.</p> 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40<table><thead><tr><th>Function</th><th>What NIST says</th><th>Eval activity</th></tr></thead><tbody><tr><td>Govern</td><td>Policies, accountability, oversight</td><td><a href="/learn/governance/anthropic-rsp">Anthropic RSP</a> or <a href="/learn/governance/openai-preparedness">OpenAI Preparedness</a> as a reference; written eval ownership; release-gate policy</td></tr><tr><td>Map</td><td>Context, use cases, stakeholders</td><td>Persona and use-case inventory; system-level risk identification; <a href="/learn/governance/ai-risk-register">risk register</a> entries</td></tr><tr><td>Measure</td><td>Quantitative and qualitative evaluation</td><td>Standing eval suite (offline and online), <a href="/learn/error-analysis/the-60-80-rule">error analysis</a>, <a href="/learn/llm-as-judge/calibration-to-humans">LLM-as-Judge calibration</a>, safety benchmarks (see <a href="/learn/safety-and-red-team/harmbench-walkthrough">HarmBench</a>, <a href="/learn/safety-and-red-team/ailuminate-walkthrough">AILuminate</a>)</td></tr><tr><td>Manage</td><td>Risk prioritization, response, communication</td><td>Incident response process; post-market monitoring; <a href="/learn/governance/board-readout-templates">board readouts</a>; model and system cards</td></tr></tbody></table> 41<p>The function names are deliberately broad. The cross-walk is what makes them actionable.</p> 42<h2 id="the-seven-trustworthiness-characteristics">The seven trustworthiness characteristics</h2> 43<p>NIST also defines seven characteristics that any trustworthy AI system should exhibit. Each maps to specific eval activities; the cross-walk below is the artifact most audits accept as evidence.</p> 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81<table><thead><tr><th>Characteristic</th><th>Eval activity that demonstrates it</th></tr></thead><tbody><tr><td>Valid and reliable</td><td><a href="/glossary#accuracy" class="glossary-link" data-glossary-term="accuracy">Accuracy</a> benchmarks against held-out test set, confidence intervals on metrics, <a href="/learn/statistics/confidence-intervals">statistical rigor</a></td></tr><tr><td>Safe</td><td>Adversarial testing, <a href="/glossary#red-team" class="glossary-link" data-glossary-term="red-team">red-team</a> program, public safety benchmark grades (<a href="/glossary#harmbench" class="glossary-link" data-glossary-term="harmbench">HarmBench</a>, <a href="/glossary#ailuminate" class="glossary-link" data-glossary-term="ailuminate">AILuminate</a>)</td></tr><tr><td>Secure and resilient</td><td>Input-filter coverage, output-filter coverage, robustness under prompt perturbation</td></tr><tr><td>Accountable and transparent</td><td>Ownership documented per system, model card published, change log of model and prompt updates</td></tr><tr><td>Explainable and interpretable</td><td><a href="/glossary#trace" class="glossary-link" data-glossary-term="trace">Trace</a> logging, decision rationale capture, judge critiques alongside scores</td></tr><tr><td>Privacy-enhanced</td><td>PII-canary probes in eval set, differential-privacy or redaction in prompts where applicable, data-retention policy documented</td></tr><tr><td>Fair (with harmful bias managed)</td><td>Demographic-slice testing on benchmarks where labels exist; disparity reporting per slice</td></tr></tbody></table> 82<p>A working audit binder maps each row to specific eval artifacts with dates and owners. The artifact is one page per row; the binder is fewer than twenty pages for a serious organization. If yours is a
82pproaching a hundred, you are producing process documentation, not evidence.</p> 83<h2 id="the-profiles-and-drafts-to-map-alongside-it">The profiles and drafts to map alongside it</h2> 84<p>The RMF core is generic on purpose. Two NIST documents make it specific enough to hang LLM evals on, and two more are worth tracking if you ship agents.</p> 85<p>The Generative AI Profile, NIST AI 600-1 (July 26, 2024), is the RMF's companion for generative AI. It names twelve risks that are new to or made worse by generative models, from confabulation and information integrity to data privacy and value-chain integration, and attaches more than 200 suggested actions to RMF subcategories, roughly a third of them under Measure <sup><a href="#user-content-fn-nist-ai-600-1" id="user-content-fnref-nist-ai-600-1" data-footnote-ref="" aria-describedby="footnote-label">2</a></sup>. Use the twelve risks as the seed list for your <a href="/learn/governance/ai-risk-register">risk register</a> and the Measure actions as a coverage check on your eval suite.</p> 86<p>NIST AI 800-2, Practices for Automated Benchmark Evaluations of Language Models, is the closest thing NIST has published to an evals methods guide. CAISI released the initial public draft on January 30, 2026 and closed comments on March 31, 2026. It covers defining evaluation objectives, running evaluations (including agent evaluations and the ways models cheat on them), and reporting results with statistical analysis and uncertainty quantification <sup><a href="#user-content-fn-nist-ai-800-2" id="user-content-fnref-nist-ai-800-2" data-footnote-ref="" aria-describedby="footnote-label">3</a></sup>. It was still an initial public draft as of October 2026, but it is the citation to put next to the Measure function and the "Valid and reliable" row above.</p> 87<p>For agents there is no NIST profile yet. CAISI's AI Agent Standards Initiative, launched February 17, 2026, was still at the request-for-information and concept-paper stage at its August 2026 page update <sup><a href="#user-content-fn-nist-caisi-agent-standards" id="user-content-fnref-nist-caisi-agent-standards" data-footnote-ref="" aria-describedby="footnote-label">4</a></sup>, and the Cyber AI Profile (NIST IR 8596), which applies the Cybersecurity Framework 2.0 to AI, has only a preliminary draft from December 16, 2025 <sup><a href="#user-content-fn-nist-cyber-ai-profile" id="user-content-fnref-nist-cyber-ai-profile" data-footnote-ref="" aria-describedby="footnote-label">5</a></sup>. Until those land, map agent-specific risks to the OWASP Top 10 for Agentic Applications <sup><a href="#user-content-fn-owasp-agentic-top-10" id="user-content-fnref-owasp-agentic-top-10" data-footnote-ref="" aria-describedby="footnote-label">6</a></sup> and record that choice in your Govern documentation, so an auditor sees a deliberate decision rather than a gap.</p> 88<h2 id="what-the-rmf-buys-you">What the RMF buys you</h2> 89<p>Three concrete things, regardless of jurisdiction.</p> 90<p>First, a vocabulary. When a customer's procurement team or a regulator asks how you manage AI risk, "we follow NIST AI RMF" is an answer that closes a meaningful percentage of conversations on its own. Microsoft, Google, IBM, and most major model providers publish RMF alignment claims in their trust portals <sup><a href="#user-content-fn-microsoft-rai" id="user-content-fnref-microsoft-rai" data-footnote-ref="" aria-describedby="footnote-label">7</a></sup>. Saying yes is table stakes.</p> 91<p>Second, a checklist. The cross-walk above is the smallest useful version of that checklist. The longer version, as a working document, becomes the index for your audit binder.</p> 92<p>Third, a forcing function. Mapping your existing eval activities to RMF outcomes surfaces gaps. The most common gap is on the Govern side: teams have measurement and management but no documented policy for who decides what to ship and why. The second most common is on the Manage side: incidents happen and are fixed but no post-mortem feeds back into the eval suite. Both are cheap to close once named.</p> 93<h2 id="what-the-rmf-does-not-buy-you">What the RMF does not buy you</h2> 94<p>The RMF is voluntary and outcome-based, not prescriptive. It does not name specific benchmarks. It does not set numerical thresholds. It does not certify your program. Several of these are now being filled
94in by the EU AI Act (which does point at testing protocols for high-risk systems), by sector-specific regulators (financial services, healthcare), and by the GPAI Code of Practice <sup><a href="#user-content-fn-eu-ai-act-portal" id="user-content-fnref-eu-ai-act-portal" data-footnote-ref="" aria-describedby="footnote-label">8</a></sup>. Adopt the RMF as the structuring document; layer the specifics on top.</p> 95<h2 id="mapping-to-eu-ai-act-obligations">Mapping to EU AI Act obligations</h2> 96<p>If your eval program is RMF-aligned, the EU AI Act mapping is short. The Measure and Manage functions correspond directly to the Act's accuracy testing (Art. 15) and post-market monitoring (Art. 72) obligations <sup><a href="#user-content-fn-eu-ai-act-portal" id="user-content-fnref-eu-ai-act-portal-2" data-footnote-ref="" aria-describedby="footnote-label">8</a></sup>. Both belong to the high-risk regime, which the 2026 Omnibus deferred to December 2, 2027 for standalone Annex III systems and August 2, 2028 for Annex I products <sup><a href="#user-content-fn-eu-ai-omnibus-2026" id="user-content-fnref-eu-ai-omnibus-2026" data-footnote-ref="" aria-describedby="footnote-label">9</a></sup>; the <a href="/learn/governance/eu-ai-act-cheatsheet">EU AI Act cheatsheet</a> has the full schedule. The Govern function corresponds to the quality management system and risk-management process (Arts. 9, 17). The Map function maps to the intended-purpose specification and conformity assessment scoping.</p> 97<p>The shortest defensible audit answer is a one-page exhibit that lists each Act obligation, the RMF function it maps to, and the specific eval artifact that demonstrates it. That exhibit, with citations to the underlying documents (your risk register row, your model card section, your post-market report), is what auditors look for.</p> 98<figure class="not-prose" style="margin: 2rem 0;"> 99 <svg viewBox="0 0 720 352" role="img" aria-label="Cross-walk from four EU AI Act obligations to the NIST AI RMF functions Govern, Map, Measure, and Manage, each paired with the eval artifact that evidences it." style="width:100%;height:auto;display:block;" xmlns="http://www.w3.org/2000/svg"> 100 <title>Cross-walk from four EU AI Act obligations to the NIST AI RMF functions Govern, Map, Measure, and Manage, each paired with the eval artifact that evidences it.</title> 101 <defs> 102 <marker id="arw-rmf" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"> 103 <path d="M0 0L10 5L0 10z" fill="hsl(var(--ink-mute))"></path> 104 </marker> 105 </defs> 106 <g font-family="'Instrument Sans Variable','Instrument Sans',ui-sans-serif,sans-serif"> 107 <text x="172" y="40" text-anchor="middle" font-size="12" fill="hsl(var(--ink-mute))">EU AI Act obligation</text> 108 <text x="548" y="40" text-anchor="middle" font-size="12" fill="hsl(var(--ink-mute))">NIST RMF function and eval artifact</text> 109 <rect x="24" y="58" width="296" height="56" rx="8" fill="hsl(var(--bg-elev))" stroke="hsl(var(--rule-strong))" stroke-width="1"></rect> 110 <text x="36" y="81" font-size="13" fill="hsl(var(--ink))">EU AI Act Arts. 9 & 17</text> 111 <text x="36" y="99" font-size="11" fill="hsl(var(--ink-soft))">risk management + quality system (QMS)</text> 112 <rect x="400" y="58" width="296" height="56" rx="8" fill="hsl(var(--bg-elev))" stroke="hsl(var(--rule-strong))" stroke-width="1"></rect> 113 <text x="412" y="81" font-size="13" fill="hsl(var(--ink))">Govern</text> 114 <text x="412" y="99" font-size="11" fill="hsl(var(--ink-soft))">eval ownership + release-gate policy</text> 115 <line x1="320" y1="86" x2="392" y2="86" stroke="hsl(var(--ink-mute))" stroke-width="1.25" marker-end="url(#arw-rmf)"></line> 116 <rect x="24" y="130" width="296" height="56" rx="8" fill="hsl(var(--bg-elev))" stroke="hsl(var(--rule-strong))" stroke-width="1"></rect> 117 <text x="36" y="153" font-size="13" fill="hsl(var(--ink))">Intended-purpose specification</text> 118 <text x="36" y="171" font-size="11" fill="hsl(var(--ink-soft))">conformity assessment scoping</text> 119 <rect x="400" y="130" width="296" height="56" rx="8" fill="hsl(var(--bg-elev))" stroke="hsl(var(--rule-strong))" stroke-width="1"></rect> 120 <text x="412" y="153" font-size="13" fill="hsl(var(--ink))">Map</text> 121 <text x="412" y="171" font-size="11" fill="hsl(var(--ink-soft))">use-case inventory + risk register</text> 122 <line x1="320" y1="158" x2="392" y2="158" stroke="hsl(var(--ink-mute))" stroke-width="1.25" marker-end="url(#arw-rmf)"></line> 123 <rect x="24" y="202" width="296" height="56" rx="8" fill="hsl(var(--bg-elev))" stroke="hsl(var(--rule-strong))" stroke-width="1"></rect> 124 <text x="36" y="225" font-size="13" fill="hsl(var(--ink))">Art. 15 accuracy testing</text> 125 <text x="36" y="243" font-size="11" fill="hsl(var(--ink-soft))">accuracy and robustness requirements</text> 126 <rect x="400" y="202" width="296" height="56" rx="8" fill="hsl(var(--accent-soft))" stroke="hsl(var(--accent))" stroke-width="1"></rect> 127 <text x="412" y="225" font-size="13" fill="hsl(var(--ink))">Measure</text> 128 <text x="412" y="243" font-size="11" fill="hsl(var(--ink-soft))">standing eval suite + safety benchmarks</text> 129 <line x1="320" y1="230" x2="392" y2="230" stroke="hsl(var(--ink-mute))" stroke-width="1.25" marker-end="url(#arw-rmf)"></line> 130 <rect x="24" y="274" width="296" height="56" rx="8" fill="hsl(var(--bg-elev))" stroke="hsl(var(--rule-strong))" stroke-width="1"></rect> 131 <text x="36" y="297" font-size="13" fill="hsl(var(--ink))">Art. 72 post-market monitoring</text> 132 <text x="36" y="315" font-size="11" fill="hsl(var(--ink-soft))">monitoring plan + incident reporting</text> 133 <rect x="400" y="274" width="296" height="56" rx="8" fill="hsl(var(--bg-elev))" stroke="hsl(var(--rule-strong))" stroke-width="1"></rect> 134 <text x="412" y="297" font-size="13" fill="hsl(var(--ink))">Manage</text> 135 <text x="412" y="315" font-size="11" fill="hsl(var(--ink-soft))">incident response + board readouts</text> 136 <line x1="320" y1="302" x2="392" y2="302" stroke="hsl(var(--ink-mute))" stroke-width="1.25" marker-end="url(#arw-rmf)"></line> 137 </g> 138 </svg> 139 <figcaption style="margin-top:0.6rem;font-size:0.8125rem;line-height:1.45;color:hsl(var(--ink-mute));"> 140 <strong>Figure:</strong> Cross-walk from EU AI Act obligations to NIST AI RMF functions and eval artifacts: Articles 9 and 17 map to Govern (eval ownership, release-gate policy), intended-purpose specification maps to Map (use-case inventory, risk register), Article 15 accuracy testing maps to Measure (standing eval suite, safety benchmarks), and Article 72 post-market monitoring maps to Manage (incident response, board readouts). 141 </figcaption> 142</figure> 143<h2 id="a-30-day-starter">A 30-day starter</h2> 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169<table><thead><tr><th>
169Week</th><th>Action</th></tr></thead><tbody><tr><td>1</td><td>Pick one product. List the seven RMF characteristics on a single page. Note one eval activity per characteristic.</td></tr><tr><td>2</td><td>Fill the gaps. The most common holes are documented ownership (Govern) and demographic-slice testing (Fair).</td></tr><tr><td>3</td><td>Stand up the model card. Anthropic's framing in their "Challenges in Evaluating AI Systems" piece is a useful reference for what to include and what to leave out <sup><a href="#user-content-fn-anthropic-evaluating-ai-systems" id="user-content-fnref-anthropic-evaluating-ai-systems" data-footnote-ref="" aria-describedby="footnote-label">10</a></sup>.</td></tr><tr><td>4</td><td>Wire the audit binder index. One page per characteristic; one row per Act obligation; the cross-walk above as the master table.</td></tr></tbody></table> 170<p>The cross-walk produced this month is the same document you will hand to a customer's procurement team, an internal compliance team, a regulator, or an acquirer. Build it once.</p> 171<p>The next chapters cover the two major vendor scaling policies that practitioners reference when designing internal versions: the <a href="/learn/governance/anthropic-rsp">Anthropic Responsible Scaling Policy</a> and the <a href="/learn/governance/openai-preparedness">OpenAI Preparedness Framework</a>.</p> 172<section data-footnotes="" class="footnotes"><h2 class="sr-only" id="footnote-label">Footnotes</h2> 173<ol> 174<li id="user-content-fn-nist-ai-rmf"> 175<p>NIST, "AI Risk Management Framework." <a href="https://www.nist.gov/itl/ai-risk-management-framework" target="_blank" rel="noopener noreferrer">https://www.nist.gov/itl/ai-risk-management-framework</a> <a href="#user-content-fnref-nist-ai-rmf" data-footnote-backref="" aria-label="Back to reference 1" class="data-footnote-backref">â©</a> <a href="#user-content-fnref-nist-ai-rmf-2" data-footnote-backref="" aria-label="Back to reference 1-2" class="data-footnote-backref">â©<sup>2</sup></a></p> 176</li> 177<li id="user-content-fn-nist-ai-600-1"> 178<p>NIST, "Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile," NIST AI 600-1, July 26, 2024. <a href="https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence" target="_blank" rel="noopener noreferrer">https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence</a> <a href="#user-content-fnref-nist-ai-600-1" data-footnote-backref="" aria-label="Back to reference 2" class="data-footnote-backref">â©</a></p> 179</li> 180<li id="user-content-fn-nist-ai-800-2"> 181<p>NIST Center for AI Standards and Innovation, "Practices for Automated Benchmark Evaluations of Language Models," NIST AI 800-2 initial public draft, January 2026. <a href="https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.800-2.ipd.pdf" target="_blank" rel="noopener noreferrer">https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.800-2.ipd.pdf</a> <a href="#user-content-fnref-nist-ai-800-2" data-footnote-backref="" aria-label="Back to reference 3" class="data-footnote-backref">â©</a></p> 182</li> 183<li id="user-content-fn-nist-caisi-agent-standards"> 184<p>NIST Center for AI Standards and Innovation, "AI Agent Standards Initiative." <a href="https://www.nist.gov/caisi/ai-agent-standards-initiative" target="_blank" rel="noopener noreferrer">https://www.nist.gov/caisi/ai-agent-standards-initiative</a> <a href="#user-content-fnref-nist-caisi-agent-standards" data-footnote-backref="" aria-label="Back to reference 4" class="data-footnote-backref">â©</a></p> 185</li> 186<li id="user-content-fn-nist-cyber-ai-profile"> 187<p>NIST, "Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile)," NIST IR 8596 initial preliminary draft, December 16, 2025. <a href="https://csrc.nist.gov/pubs/ir/8596/iprd" target="_blank" rel="noopener noreferrer">https://csrc.nist.gov/pubs/ir/8596/iprd</a> <a href="#user-content-fnref-nist-cyber-ai-profile" data-footnote-backref="" aria-label="Back to reference 5" class="data-footnote-backref">â©</a></p> 188</li> 189<li id="user-content-fn-owasp-agentic-top-10"> 190<p>OWASP GenAI Security Project, "OWASP Top 10 for Agentic Applications," December 9, 2025. <a href="https://genai.owasp.org/2025/12/09/owasp-top-10-for-agentic-applications-the-benchmark-for-agentic-security-in-the-age-of-autonomous-ai/" target="_blank" rel="noopener noreferrer">https://genai.owasp.org/2025/12/09/owasp-top-10-for-agentic-applications-the-benchmark-for-agentic-security-in-the-age-of-autonomous-ai/</a> <a href="#user-content-fnref-owasp-agentic-top-10" data-footnote-backref="" aria-label="Back to reference 6" class="data-footnote-backref">â©</a></p> 191</li> 192<li id="user-content-fn-microsoft-rai"> 193<p>Microsoft, "Responsible AI hub." <a href="https://www.microsoft.com/en-us
193/ai/responsible-ai" target="_blank" rel="noopener noreferrer">https://www.microsoft.com/en-us/ai/responsible-ai</a> <a href="#user-content-fnref-microsoft-rai" data-footnote-backref="" aria-label="Back to reference 7" class="data-footnote-backref">â©</a></p> 194</li> 195<li id="user-content-fn-eu-ai-act-portal"> 196<p>European Commission, "Regulatory framework on AI." <a href="https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai" target="_blank" rel="noopener noreferrer">https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai</a> <a href="#user-content-fnref-eu-ai-act-portal" data-footnote-backref="" aria-label="Back to reference 8" class="data-footnote-backref">â©</a> <a href="#user-content-fnref-eu-ai-act-portal-2" data-footnote-backref="" aria-label="Back to reference 8-2" class="data-footnote-backref">â©<sup>2</sup></a></p> 197</li> 198<li id="user-content-fn-eu-ai-omnibus-2026"> 199<p>European Commission, "AI Omnibus enters into force." Regulation (EU) 2026/1744, in force July 27, 2026. <a href="https://digital-strategy.ec.europa.eu/en/news/ai-omnibus-enters-force" target="_blank" rel="noopener noreferrer">https://digital-strategy.ec.europa.eu/en/news/ai-omnibus-enters-force</a> <a href="#user-content-fnref-eu-ai-omnibus-2026" data-footnote-backref="" aria-label="Back to reference 9" class="data-footnote-backref">â©</a></p> 200</li> 201<li id="user-content-fn-anthropic-evaluating-ai-systems"> 202<p>Anthropic, "Challenges in Evaluating AI Systems." <a href="https://www.anthropic.com/news/evaluating-ai-systems" target="_blank" rel="noopener noreferrer">https://www.anthropic.com/news/evaluating-ai-systems</a> <a href="#user-content-fnref-anthropic-evaluating-ai-systems" data-footnote-backref="" aria-label="Back to reference 10" class="data-footnote-backref">â©</a></p> 203</li> 204</ol> 205</section></article>`;export{e as default}; 206//# sourceMappingURL=governance--nist-ai-rmf-mapped-C124sFOh.js.map
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.