AI CORE / DOCUMENTATION

Stable concepts, precise boundaries

The locked ontology is a descriptive vocabulary. New profiles build on it separately and do not retrospectively alter its meaning.

Subject, plan and execution

Audited Object

A clearly bounded subject of assessment. For a web service, a product name alone is insufficient: assessment requires a specific snapshot and functional scope.

Audit Plan

The assessment specification. In the original ontology, a plan is a deterministic audit specification. Broader professional assessment may also involve human judgment; this must be identified separately and not presented as a deterministic result.

Runner

The mechanism executing a plan. The vocabulary term does not mean that AI CORE provides or operates such a program.

Evidence and provenance

Evidence

A specific retained item: an observation, control output or other artifact. Its identity, provenance and relationship to a control must be traceable.

Evidence Manifest

An inventory of evidence and its relationships. It helps establish what a package contains, what is missing and which bytes were assessed.

Evidence Layer

The layer preserving evidence and history. A correction should create a new record linked to its predecessor, rather than silently overwrite the original result.

Ontology Anchor

A reference to an exact ontology release, its stable address and checksum.

Descriptive reference and control profile

The vocabulary explains what a record means; a control profile specifies a requirement and the evidence needed to assess it. The ontology is neither a security standard nor a legal framework. Its Audit Domain describes observation separate from the Source Domain. Active intrusive testing therefore cannot automatically be described as the same mode; it requires separate authorization and methodology.

An example relationship

The subject is a specific public snapshot of a service. A control examines rejection of unauthorized access. Evidence may be a sanitized test result stating scope, time and observed behavior. A manifest assigns it to a control item. A description of a test that has not been performed is not evidence that it passed.

Original immutable reference 2.0 · Canonical JSON-LD. Historical reference content remains preserved; presentation changes do not alter its meaning.