Each agency must publish a statement, available to the public, that sets out its approach to adopting and using AI, with the content and form the DTA's transparency statement standard prescribes. It must be reviewed, and updated where needed, at least yearly and sooner whenever the agency makes a significant change to its approach to AI. The agency must tell the DTA, by email to the AI policy mailbox, when it publishes the statement and whenever it changes it. This requirement carried over from version 1.1, so agencies should already have a statement; the annual review and the notification of changes are where lapses occur.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.