Governance
A model without a kill switch
A model without a kill switch
is not ready.
We use NIST, ISO, and OMB. We do not invent a framework and call it governance.
2022–2024.
Tools shipped with “AI” in the name. Guardrails were a later ticket.
2024–2025.
Hallucinations, leaks, and brittle demos made the cost obvious.
2026.
NIST, ISO, and OMB published enough that “we’ll govern it later” is no longer a plan.
Risk-proportionate
controls.
A prototype is light. A production system that touches rights or safety is not.
NIST AI RMF (GOVERN). ISO/IEC 23894:2023.A human in the loop,
by tier.
Low-risk work can stay on the loop. Consequential decisions stay in it. Overrides and a kill switch are built in.
NIST AI RMF (MANAGE). OMB M-24-10.Evaluation
on every change.
Model, prompt, or data refresh trips the same checks: quality, safety, bias, security.
NIST AI RMF (MEASURE). ISO/IEC 5338:2023.A record.
Who approved what, when, and why. Change logs and incident notes that someone can actually read.