VOCE Agent Conformance · Shareable lens
Audit lens · A1
An audit view of whether execution can be reconstructed, authority attributed, data verified, evidence retained and controls tested.
Priority domains
Audit lens
An audit view of whether execution can be reconstructed, authority attributed, data verified, evidence retained and controls tested.
Observability & audit4 applicable controls
Authorization & authority0 applicable controls
Data, RAG & memory5 applicable controls
European regulatory overlay5 applicable controls
Evaluation & assurance3 applicable controls
Normative controls remain in English so the framework has one reference wording.
Applicable controls
17 applicable controls · 7 critical controls
DATA-01Source provenanceA0+ · major · documented→DATA-02Access-control propagationA1+ · critical · tested→DATA-03Deletion and tombstone propagationA1+ · critical · tested→DATA-04Memory retention and expiryA1+ · major · documented→DATA-05Regional routing and residencyA1+ · major · documented→OBS-01End-to-end task traceA1+ · critical · verified_in_operation→OBS-02Model and version traceabilityA0+ · major · verified_in_operation→OBS-03Tool execution evidenceA1+ · critical · verified_in_operation→OBS-05Telemetry privacy policyA1+ · major · tested→ASSURE-01Task-level evaluation suiteA0+ · major · tested→ASSURE-03Prompt-injection and tool-manipulation testsA1+ · critical · tested→ASSURE-04Change-triggered re-evaluationA1+ · major · verified_in_operation→EU-01AI Act role mappingA0+ · major · documented→EU-02Risk-classification recordA0+ · critical · documented→EU-03Transparency and human-oversight mappingA1+ · critical · tested→EU-04GPAI/downstream documentation reviewA1+ · major · documented→EU-05Sector overlay applicabilityA0+ · major · documented→
VOCE
This page describes a VOCE lens on the framework. It contains no private self-assessment data and is not an EU or ISO certification.