VOCE Agent Conformance · Shareable lens
Risk lens · A1
A risk view of authorization, data, assurance, observability and European obligations that can create material exposure.
Priority domains
Risk lens
A risk view of authorization, data, assurance, observability and European obligations that can create material exposure.
Authorization & authority0 applicable controls
Evaluation & assurance3 applicable controls
European regulatory overlay5 applicable controls
Data, RAG & memory5 applicable controls
Observability & audit4 applicable controls
Normative controls remain in English so the framework has one reference wording.
Applicable controls
17 applicable controls · 7 critical controls
DATA-01Source provenanceA0+ · major · documented→DATA-02Access-control propagationA1+ · critical · tested→DATA-03Deletion and tombstone propagationA1+ · critical · tested→DATA-04Memory retention and expiryA1+ · major · documented→DATA-05Regional routing and residencyA1+ · major · documented→OBS-01End-to-end task traceA1+ · critical · verified_in_operation→OBS-02Model and version traceabilityA0+ · major · verified_in_operation→OBS-03Tool execution evidenceA1+ · critical · verified_in_operation→OBS-05Telemetry privacy policyA1+ · major · tested→ASSURE-01Task-level evaluation suiteA0+ · major · tested→ASSURE-03Prompt-injection and tool-manipulation testsA1+ · critical · tested→ASSURE-04Change-triggered re-evaluationA1+ · major · verified_in_operation→EU-01AI Act role mappingA0+ · major · documented→EU-02Risk-classification recordA0+ · critical · documented→EU-03Transparency and human-oversight mappingA1+ · critical · tested→EU-04GPAI/downstream documentation reviewA1+ · major · documented→EU-05Sector overlay applicabilityA0+ · major · documented→
VOCE
This page describes a VOCE lens on the framework. It contains no private self-assessment data and is not an EU or ISO certification.