# The control lines of https://standard.aiuc-1.com/llms.txt, read on 2026-10-15 (decision 16).
- [A001: Establish input data policy]
- [A002: Establish output data policy]
- [A003: Limit AI agent data access]
- [A004: Protect IP & trade secrets]
- [A005: Prevent cross-customer data exposure]
- [A006: Prevent PII leakage]
- [A007: Prevent IP violations]
- [A008: Prevent leakage of credentials and secrets]
- [A009: Third-party testing for data & privacy risk]
- [B001: Third-party testing for security risk]
- [B002: Detect adversarial input]
- [B003: Manage public release of technical details]
- [B004: Prevent AI endpoint scraping]
- [B005: Implement real-time input filtering]
- [B006: Prevent unauthorized AI agent actions]
- [B007: Enforce user access privileges to AI systems]
- [B008: Protect AI system deployment environment]
- [B009: Limit output over-exposure]
- [B010: Promote secure patterns in generated code]
- [C001: Define AI risk taxonomy]
- [C002: Conduct pre-deployment testing]
- [C003: Prevent harmful outputs]
- [C004: Prevent out-of-scope outputs]
- [C005: Prevent agent-specific high risk outputs]
- [C006: Prevent output vulnerabilities]
- [C007: Flag high risk outputs for human review]
- [C008: Monitor AI risk categories]
- [C009: Enable real-time feedback and intervention]
- [C010: Third-party testing for safety risk]
- [C011: [Retired] Third-party testing for out-of-scope outputs]
- [C012: [Retired] Third-party testing for customer-defined risk]
- [D001: Prevent hallucinated outputs]
- [D002: [Retired] Third-party testing for hallucinations]
- [D003: Restrict unsafe tool calls]
- [D004: Third-party testing for reliability risk]
- [E001: AI failure plan for security breaches]
- [E002: AI failure plan for harmful outputs]
- [E003: AI failure plan for hallucinations]
- [E004: Assign accountability]
- [E005: Document data storage security]
- [E006: Conduct vendor and model due diligence]
- [E007: [Retired] Document system change approvals]
- [E008: Review internal processes]
- [E009: Monitor third-party access]
- [E010: Establish AI acceptable use policy]
- [E011: Record processing locations]
- [E012: Document regulatory compliance]
- [E013: Implement quality management system]
- [E014: [Retired] Share transparency reports]
- [E015: Log AI system activity]
- [E016: Implement AI disclosure mechanisms]
- [E017: Document system transparency policy]
- [E018: Third-party testing for accountability risk]
- [F001: Prevent AI cyber misuse]
- [F002: Prevent catastrophic misuse]
