Operate AI incident reporting + regulatory compliance + public reporting + international cooperation per OECD AI Principles + applicable regulation + voluntary commitment. AI incident reporting and response must (a) detect + assess + respond to AI incidents including model failure + bias incident + safety event + adversarial attack + privacy breach + misuse + emergent capability + agentic action gone wrong + (b) report incidents per applicable regulation (EU AI Act Article 73 serious incident reporting + sector-specific reporting + voluntary commitments) + (c) maintain incident learning loop feeding back to risk management + design + deployment. Regulatory compliance for AI must (a) maintain AI-regulatory inventory across applicable jurisdictions (EU AI Act + UK AI regulation + US federal + state + sectoral + Canada + Australia + Japan + similar) + (b) monitor for change + integrate new requirements into AI governance + (c) coordinate with broader compliance function including privacy + cyber + consumer protection + competition + employment. Public reporting and accountability to society must (a) maintain transparency about AI use + outcomes + harms + remediation per applicable expectation + (b) engage with civil society + academia + media + public per organisational AI strategy + (c) participate in industry voluntary commitments where appropriate (Frontier Model Forum + similar). International cooperation for trustworthy AI must (a) participate in international AI governance dialogues + (b) align cross-border AI deployment with applicable regulation in each jurisdiction + (c) coordinate cross-border AI incident response.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.