Nexus StandardsDigital, Cyber and AIHazard and threat families
Area · proposed

AI and autonomous systems risk standards

AI and autonomous systems are being deployed into decisions about credit, health, infrastructure and security faster than their failure modes are understood, and general-purpose models create common dependencies across sectors. This section of the Digital, cyber and AI subsite sets records for model documentation, evaluations, incidents and deployment contexts, crosswalked to AI governance frameworks, so that risk claims about AI systems rest on documented evidence. Every artifact of the area carries a UNI (Unique Nexus Identifier), which identifies and never certifies.

UNI
requested · not yet allocated
Status
PROPOSEDproposed area · no registry row yet
Last reviewed
area context bank
Cite this page

Nexus Standards (2026). AI and autonomous systems risk standards: area brief, Digital, Cyber and AI (PROPOSED). https://nexustandards.com/digital-ai/ai-and-autonomous-systems-risk-standards/. Last reviewed 2026-10-17.

Download the profile

Files carry the credits and the licence line; they are generated in your browser and nothing is sent. Downloads need script.

01Scope

AI and autonomous systems risk standards: what the area covers, and what it leaves to others.

The hazard and threat families section of Digital, Cyber and AI. Scope as the area context entry states it (PROPOSED).

In scope 5

  • Model and dataset documentation records (model cards, datasheets)
  • Evaluation and red-team result records with method
  • AI incident records
  • Deployment context and risk-tier records (NS-9)
  • Machine-readable AI obligations (NS-10)

Out of scope 3

  • Model training techniques
  • Release of capability-enhancing details for dangerous uses
  • Product endorsements

Jurisdictions No jurisdiction note is recorded for this area yet; jurisdiction narrows what applies and never implies that a Nexus profile satisfies a law.

02Hazards and sectors

What acts on this area, and who carries it.

Hazards and threats 5

Model failure and biasMisuse of general-purpose AILoss of human oversightAI-enabled cyber attacksCorrelated failure from shared models

Sectors 4

Digital, telecom and platformsFinance, insurance and capital marketsHealth systemsPublic sector and government
03Data and feeds

2 sources, with provider, licence and delivery path.

Sources the area reads or proposes. Delivery follows GRIx first; a source is shown live only after an owner decision admits it for public pages.

Every feed · pending admission

No legal register row admits any of these sources for live display on public pages yet, so nothing is read from them here. A register row that exists records the source for the governed GRIx path; admission for public pages is a separate owner decision.

Admitted
0
none yet
Register row exists
0
recorded for the GRIx path
Proposed row
2
terms to be recorded
Delivery
1 GRIx · 0 plugin · 0 browser · 1 snapshot
GRIx first, then plugin, browser-direct, snapshot
  • OSV open source vulnerability databasepending admission

    OSV project (Google, OpenSSF) · continuous

    Per-source licences; OSV schema CC BY 4.0

    GRIx governed readproposed register row

  • Our World in Data datasetspending admission

    Global Change Data Lab (Our World in Data) · varies

    CC BY 4.0 for OWID-produced data; third-party data keep their licences

    build-time snapshotproposed register row

04Systemic couplings

4 couplings to other areas and subsites.

Each coupling names the mechanism that links this area to another; select a card on the canvas to trace it. Mechanisms are stated in the context bank (PROPOSED).

Canvas · the area and its couplingsDesign, not a record
AI and autonomous systems risk standards: systemic couplingsThe couplings the area context bank records for AI and autonomous systems risk standards: 2 areas in Digital, Cyber and AI, 2 areas in other subsites and 2 subsites reached. Each coupling carries a mechanism stated in the context bank (PROPOSED); a reading aid, not a dependency proof.

Fig.RUNNING marks the area you are reading; DONE an area in the same subsite, QUEUED an area elsewhere and GATE a subsite reached. Tags give reading order only, never a status. Design, not a record.

  1. Cyber and digital risk standardsDigital, Cyber and AICommon driver: AI systems introduce new attack surfaces and are used to scale attacks.
  2. Information integrity and trustGovernance, Security and SocietyCascade: generative AI lowers the cost of synthetic disinformation.
  3. Frontier technology risk standardsDigital, Cyber and AIFeedback: AI accelerates other frontier technologies, including biotechnology.
  4. Financial stability and prudential riskFinance, Insurance and the EconomyCommon driver: shared models and data can produce herding and correlated failures.
05Open standards

5 open standards, each with its relation.

Relations are register entries (NS-14), never conformance or equivalence statements; hover or focus a relation for its meaning. Names of standards bodies and their standards belong to their stewards and are used only to identify the documents; no text of an external standard is reproduced here.

06Indicators

1 indicator the area tracks.

Indicator names and codes as their stewards publish them; values appear only from a governed GRIx source, never typed into a page.

07Restricted compatibility profiles

2 closed standards, named only.

Closed or paywalled standards appear by name and link only; any compatibility profile of one is built on simulated data and kept on protected pages until an institutional arrangement with the issuing body is recorded. Nexus Standards is not affiliated with, endorsed by or certified by any standards body named here.

08Nexus Standards that apply

4 Nexus Standards for this area.

The Nexus Standards the area context entry lists. Every one is proposed or specified; none is adopted by an authority.

  1. 01

    NS-0 · Constitution and principles

    Status proposed · 12 rules stated. Read NS-0

  2. 02

    NS-10 · Policies and clauses (machine-readable obligations, enforcement in commons and command rooms)

    Status proposed · 7 rules stated. Read NS-10

  3. 03

    NS-11 · Verification and monitoring (evidence, attestations, zero-trust conformance observation)

    Status proposed · 6 rules stated. Read NS-11

  4. 04

    NS-12 · Software, model and AI/ML artifacts (supply chain, model cards, dataset sheets)

    Status proposed · 4 rules stated. Read NS-12

10Readiness

What each pathway can read from this area.

GCRI Canada evidence pathway

GCRI Canada

GCRI Canada may admit evaluation and incident records with method, version and evaluator as research evidence; GCRI Canada decides under its own evidence and research rules, and no approval is implied.

Open the GCRI Canada evidence pathway

Recognition pathway

The Global Risks Forum (GRF)

GRF may record organisations publishing model documentation on the shared profile as a dialogue item; GRF decides under its own recognition rules, and no recognition or endorsement is implied.

Open the Recognition pathway

Capital pathway

The Global Risks Alliance (GRA)

GRA may read AI risk-tier and evaluation records when it considers AI-dependent investments; GRA decides under its own capital-readiness rules, and no approval, rating or investment view is implied.

Open the Capital pathway

Each institution decides under its own rules what it reads as evidence; no pathway is an approval, a readiness statement or investment advice.

11Working group

The working-group charter, proposed.

Scope

Model, evaluation, incident and deployment-context records crosswalked to AI governance frameworks.

No working group is chartered yet; a community may charter this one under NS-13 through a docket.

Deliverables · 3
  1. AI evaluation record profile
  2. AI incident record schema
  3. Obligation crosswalk to AI RMF functions and EU AI Act risk tiers (links only)
Liaison targets · 4
  • NIST AI Safety Institute Consortium liaison sought
  • OECD.AI Network of Experts liaison sought
  • MLCommons liaison sought
  • Partnership on AI liaison sought
12Open problems

3 open problems an expert would start with.

  1. Evaluations of general-purpose models are not standardised and can be gamed.
  2. There is no shared global AI incident taxonomy.
  3. Systemic risk from model concentration is not measured.
13Audiences

Who works with this area: 4 audiences.

  1. AI developers and evaluators
  2. AI governance and compliance teams
  3. Regulators
  4. AI safety researchers
14References

4 sourced references.

Peer-reviewed sources and published statistics on the publishers' own domains, as the context entry cites them. No Risk Academy faculty pathway is linked to this area yet; one is linked when a faculty publishes a pathway that fits.

  1. peer-reviewedManaging extreme AI risks amid rapid progressScience · 2024
  2. peer-reviewedDatasheets for datasetsCommunications of the ACM · 2021
  3. peer-reviewedModel Cards for Model ReportingProceedings of the Conference on Fairness, Accountability, and Transparency (ACM) · 2019
  4. published statisticsInternational AI Safety Report 2025UK Department for Science, Innovation and Technology (for the report's expert advisory panel) · 2025
15Key terms

Terms used on this page.

UNI
Unique Nexus Identifier: identifies and resolves an artifact and its record; it never certifies truth, readiness or approval.
PROPOSED
Drafted content that no authority has adopted. Every area entry here is a proposal to the Nexus Standards registry.
crosswalk
Relation: Nexus clauses are mapped to parts of the external standard by number, never by text.
cite
Relation: the external standard is cited by identifier and URL as a reference.
adopt
Relation: the external standard is used as published, values validated against it.
compatibility profile (restricted)
Relation to a closed or paywalled standard: named and linked only; any profile is simulated and kept on protected pages.
pending admission
No legal register row admits this source for display on public pages yet, so nothing is read from it.
GRIx
The governed data layer of Nexus Foundry: external data is read through it with its licence and source release.
docket
A public change record under NS-13, decided by editors with written reasons.
attestation
An evaluator's recorded result for one clause and one subject under NS-11; never a certification.
liaison sought
A liaison the working group would ask the body for; none is held unless the body confirms it in writing.
17Learn and apply

Where AI and autonomous systems risk standards is taught, worked on and run.

Risk Academy disciplines that teach AI and autonomous systems risk standards, with their courses; the GCRI Canada, The Global Risks Forum (GRF) and The Global Risks Alliance (GRA) subsites that carry those disciplines; and the Nexus Foundry systems the standards name. Mappings are proposed for review (Risk Academy standards map, 2026-10-17); a link says a page on the same subject exists, never an endorsement or a conformance statement; framework names in course titles are named and linked, never reproduced.

Risk Academy

Disciplines and courses

18Questions

Questions and answers.

Is the AI and autonomous systems risk standards area adopted?
No. The area entry is PROPOSED content for the Nexus Standards registry; there is no registry row yet. Adoption of any standard is a recorded authority decision and none is recorded today.
Are the feeds on this page live?
No. Every feed is pending admission: no legal register row admits it for public pages yet, so nothing is read from it here.
How do I change this brief?
Through a docket under NS-13: a pull request against the area context bank or the registry, decided by editors with written reasons.
Nexus Standards

Shape this brief: AI and autonomous systems risk standards.

Propose a change, join the working group or name a source. Area entries are PROPOSED content for the Nexus Standards registry; a UNI identifies and never certifies, and nothing on this site is a certification, an approval or a readiness statement.

Nexus Standards documents CC BY 4.0 · tooling Apache-2.0 · counsel review pending (DEC-2026-10-16-NEXUS-STANDARDS-OPEN-LICENCE). External standards are named and linked under their own licences; a UNI (Unique Nexus Identifier) identifies, it never certifies. · Generated from the Nexus Standards corpus at commit 437ae044c5cb (2026-10-17); proposed and open.

Skip to toolbar