Nexus Standards · Programme · Foundations
10 areas
Every area rests on the same few commitments: a single identifier that identifies an artifact without certifying it, a public process that records written reasons for its decisions, open licences, conformance demonstrated from evidence, and closed standards that are named and linked but not reproduced. This programme sets out those commitments and the processes that maintain them. Each artifact of these areas carries a UNI (Unique Nexus Identifier).
Open area start · Open area
The registry lists the area and its programme page invites participation. A working group may be chartered under NS-13.
Working group step · Working group
The charter is public and states the scope, exclusions, deliverables, meeting schedule and decision rule. Drafts, issues and comments are public.
Community draft record · Working group
Drafts, issues and comment dispositions are public artifacts, each with a UNI (Unique Nexus Identifier). The chairs record each objection with its disposition.
Horizontal reviews gate · Working group
Each review group reads the whole draft and records findings; a finding is dispositioned in writing before the public last call opens.
Public last call gate · Public
The draft, its crosswalk rows with source links, its clauses and its test suite are published for comment. Consensus with recorded dissent; a formal objection is answered in writing; appeals go to the Technical Management Division (technical) or the independent panel (process).
Proposed record · Public
The standard is proposed and available for voluntary use by implementers ahead of adoption.
Two implementations gate · Implementation
Implementers run the Apache-2.0 test suite and publish their results by reference; the working group collects the final specification agreements.
Candidate record · Implementation
The implementation report names the implementations, the suite version and the instant of each run.
Adopted decision · Global Standards Council
A permanent edition with a dated edition identifier; the errata process remains open; systematic review takes place every three years.
Later edition or withdrawal end · Global Standards Council
The record is retained and points to its successor. Earlier editions remain unchanged.
Fig.From an open area to an adopted edition: the actor at each step, the rule that governs it and the record it produces. Select any step to read it. Sources: NS-13: development process · Nexus Standards operating model.
nexustandards.com/foundations/Area profiles are proposed.
Nexus Standards (2026). Foundations and Governance: a programme of the Nexus Standards. Proposed. https://nexustandards.com/foundations/. Last reviewed 17 October 2026.
Files include the credits and the licence statement and are generated in the browser; no data is transmitted. Downloads require JavaScript.
The development track is shown above; the pages below set out each stage.
The development lifecycle, step by step, alongside the tracks of other standards bodies.
AreaContribution channels, from a comment at an issuing body to a register change.
AreaConformance classes, test suites, statements and the conformance process.
AreaThe Nexus development track alongside the standards for standards development.
The map is framed on the world as context for foundations and governance. Shown at first: population density, 2020 (Gridded Population of the World v4.11, NASA SEDAC, CIESIN, Columbia University) and night-time lights, daily (VIIRS Black Marble, VNP46A2, NASA LAADS DAAC). The layer drawer adds flood water, 3-day composite (VIIRS Global Flood Product); active fires and thermal anomalies, last day (VIIRS NOAA-20 375 m, FIRMS); and true colour (VIIRS NOAA-20 corrected reflectance). NASA products are served through NASA GIBS under NASA's open data policy, with acknowledgement; population density is GPW v4.11 by CIESIN, Columbia University, under CC BY 4.0; coastlines, boundaries and place names come from NASA GIBS reference layers (© OpenStreetMap contributors, ODbL) and Natural Earth (public domain). Each layer shows its own observation date; full credits are given under the map. Other sources of the profile, such as OpenAlex works API (literature on standards governance and openness) and RFC Editor index and RSS feed of published RFCs (process documents cited by NS-0), are listed for reference.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 2
People and hazards
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
Where people live, night-time lights and the floods and fires public institutions answer to, framed on World.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place.
Layers and dates
The systemic couplings recorded for this context, grouped by transmission mechanism. The bar summarises each mechanism (select one to filter); each entry names the connected area or programme and describes the mechanism.
The interactive view requires JavaScript; the sections below present the same records.
A system model of this programme built from the registry: 20 systems, 10 sectors, 14 controls, 22 feeds, 14 indicators. Select the components to include, choose an initiating hazard and run the scenario. Stress propagates through the hazard relations of the Nexus Hazard Standard (NHS-1), the exposure of each system, the recorded couplings and the sectors that carry the loss; adopted standards dampen transmission and live data sources support detection. All parameters are stated assumptions that the reader can adjust; results are illustrative scenario outputs for exercises and training, not forecasts or risk assessments.
Systems and couplings
Controls
NS-1 The UNI and the artifact catalog (grammar v0.2: domain, sector, region and environment segments)NS-10 Policies and clauses (machine-readable obligations: definition, binding, evaluation and enforcement)NS-11 Verification and monitoring (evidence, attestations, zero-trust conformance observation)NS-3 Risk record UNIs (grammar, legacy crosswalk, allocation authority)NS-7 Resolver landing pages, page meta tags, sitemapNS-9 Contextual UNIs (deployments, instances, programme instances)NS-0 Constitution and principlesNS-13 Standards development process (open proposals, review, versioning, adoption)NRS-H62 Hazard family: Compound and multi-hazard events (NHS-1 sys.compound)NRS-A5 Built-in licensing and rightsNRS-H112 Hazard family: Governance and institutional failure (NHS-1 soc.governance)NRS-U18 Universe platform profile: Nexus AgencyNRS-H28 Hazard family: Climate-state shifts (NHS-1 eco.climate-state)NRS-H65 Hazard family: Planetary boundary transgressions (NHS-1 planet.boundary)Observation
10 areas, each with its tier, registry status, the Nexus Standards it lists, the open standards it references, its data sources and its couplings.
Area index2 of 10 areas are listed in the registry; the others are proposed areas with a complete area profile.
8 Nexus Standards across 10 areas.
Applicable Nexus StandardsA filled cell indicates that the area profile lists the Nexus Standard concerned.
36 couplings link the areas of this programme with 6 other programmes, counted in both directions from the area profiles. Select a card on the diagram to trace a coupling.
Fig.Programmes coupling in at the left, the areas of this programme in the centre and the programmes its areas couple out to at the right; edge labels give the number of couplings.
| Coupled programme | Couplings | Example mechanism |
|---|---|---|
| Communities, Learning and Contribution | 20 | The liaison register defined here is rendered in the Communities, Learning and Contribution programme; an entry is listed there only after the other body's written confirmation…Governance and liaison to Liaison register and partners |
| Data and Evidence | 7 | The Data and Evidence programme profiles the record kinds (observation, source release, indicator, boundary) whose UNIs are minted under NS-3 by the governed data service.The UNI and the artifact catalog to Data and Evidence |
| Trust, Verification and Assurance | 5 | The Trust, Verification and Assurance programme covers the attestation and monitoring arrangements (evaluators, mandates, digests, INDETERMINATE results) that a declaration's…Conformance programme to Trust, Verification and Assurance |
| Readiness and Adoption | 2 | Open process records (proposals, dispositions, decisions) show how a programme was developed.Recognition pathway, The Global Risks Forum (GRF) to Open standards development |
| Governance, Security and Society | 1 | The Foundations and Governance programme explains NS-0 and the NS-13 process, on which policy readers rely when assessing a standard.For policy makers to Foundations and Governance |
| Open Infrastructure and Developers | 1 | Protected profiles for closed standards are exercised only on simulated data in the sandbox.Sandbox and simulated data to Compatibility profiles for closed standards |
10 proposed charters, one per area, each with a scope, deliverables and liaison targets. Institutions and experts are invited to charter a working group; a liaison is listed as sought until the issuing body confirms it in writing.
| Area | Working group scope | Deliverables | Liaison sought |
|---|---|---|---|
| Constitution and principles | Maintain NS-0, answer interpretation requests in writing and conduct the annual review of the principles in the light of experience on the standards track. | 3 | 3Research Data Alliance (RDA) FAIR-related groups (participation sought), Global Indigenous Data Alliance (GIDA) on use… |
| The UNI and the artifact catalog | Maintain NS-1, NS-3 and NS-9, the resolver behaviour (NS-7) and the crosswalks to other persistent identifier systems. | 3 | 3DataCite (information exchange on metadata crosswalks sought), Research Organization Registry (ROR) community… |
| How a standard is made | Maintain NS-13, the charter template, the issue-tracker convention and the stage-gate checklists. | 3 | 3IETF process community (information exchange on consensus practice sought), W3C Process Community Group (information… |
| Governance and liaison | Maintain the governance document, the liaison register procedure and the conflict-of-interest rules. | 3 | 5W3C Community Group programme (participation sought), Research Data Alliance (working-group participation sought),… |
| Licensing and intellectual property | Maintain the licence table, the OWFa and DCO procedures and the rights-holder notice route, with legal review recorded when completed. | 3 | 3Open Web Foundation (consultation on OWFa use sought), Creative Commons (information exchange on licence use in… |
| Conformance programme | Maintain the conformance model, the declaration record kind, the test-suite conventions and the register's wording. | 3 | 3OGC Compliance Program (information exchange on executable tests sought), OpenSSF (information exchange on attestation… |
| Compatibility profiles for closed standards | Maintain the profile method, synthetic example datasets, access rules and the activation procedure for each issuing body. | 3 | 3ISO Central Secretariat through the Standards Council of Canada (arrangement on named references sought), IEC… |
| Start here and contribute | Maintain onboarding content, the charter template, the contributor guide and the code of conduct. | 3 | 2Research Data Alliance (information exchange on community onboarding sought), W3C Community Groups (information… |
| Open standards development | Maintain the process standard, its charters and its horizontal reviews. | 3 | 3W3C Community Groups programme, Research Data Alliance, Standards Council of Canada |
| Naming, marks and intellectual property | Maintain names, licences and licence status of artifacts. | 3 | 3Open Source Initiative, Creative Commons, Open Knowledge Foundation |
Select an area above, adopt its proposed charter and submit it as a public change record under NS-13; the editors decide with written reasons. Develop a standard
Propose an amendment to an area profile, citing a peer-reviewed or official source.
Propose a source with its provider, licence and delivery path for licence review.
Each participating country takes part through its National Nexus Consortium (NNC). The National Standards Council (NSC) decides adoption, adaptation or reference in its jurisdiction, and National Working Groups (NWGs) draft national inputs and run field exercises. Competent national authorities are engaged through official channels.
Contributions to an external standard are made through the issuing body's own channels; outcomes are reflected here as register changes. Movement and contribution
What each institution of the ecosystem draws from these areas: GCRI Canada, as Secretariat, for evidence; The Global Risks Forum (GRF) for recognition; and The Global Risks Alliance (GRA) for capital.
Constitution and principles · GCRI Canada decides under its own evidence rules whether a record built to NS-0 is admissible as evidence; adherence to the principles is an input to that decision, not an approval.
The UNI and the artifact catalog · GCRI Canada decides under its own rules which identified records it accepts as evidence; a resolvable UNI makes a record traceable but is not an acceptance.
How a standard is made · GCRI Canada decides under its own rules whether a standard at a given stage may be cited in its evidence work; a stage is a process fact, not an approval.
7 further areas set out what this pathway draws on; each area brief gives its own statement.
Constitution and principles · The Global Risks Forum (GRF) decides recognition under its own programme rules; citing NS-0 makes a contribution's openness and accuracy commitments legible to that process and implies no recognition.
The UNI and the artifact catalog · The Global Risks Forum (GRF) may use UNIs to reference contributions in its own processes and decides recognition independently of whether a record carries one.
How a standard is made · The Global Risks Forum (GRF) decides under its own rules whether to convene dialogue on a draft; reaching the Proposed or Adopted stage implies no recognition by it.
7 further areas set out what this pathway draws on; each area brief gives its own statement.
Constitution and principles · The Global Risks Alliance (GRA) decides capital readiness under its own criteria; NS-0 only makes the evidential basis of an artifact readable by its reviewers.
The UNI and the artifact catalog · The Global Risks Alliance (GRA) decides capital readiness under its own criteria; UNIs only let its reviewers trace an evidence chain to source records.
How a standard is made · The Global Risks Alliance (GRA) determines whether an adopted standard is relevant to its capital readiness criteria; the standards track confers no status on its members.
7 further areas set out what this pathway draws on; each area brief gives its own statement.
Each institution determines under its own rules what it accepts as evidence; a pathway reading is neither an approval nor investment advice.
22 data sources named by the areas, each with provider, licence, delivery path and register status.
Data sources are listed for reference; live data is displayed once licence review is complete.
Crossref REST API licence fields (licence URLs on cited works)for reference
Crossref · continuous
Metadata free to reuse without restriction (Crossref metadata policy)
direct browser readproposed for the data register
DataCite REST API (DOI metadata for crosswalk and harvest tests)for reference
DataCite · continuous
CC0 1.0 (metadata)
direct browser readproposed for the data register
GitHub releases of the nexus-standards repositoryfor reference
GitHub · per release
GitHub terms; repository content CC BY 4.0 and Apache-2.0
integration pluginproposed for the data register
GLEIF Golden Copy LEI concatenated file (legal-entity identifiers for liaising organisations)for reference
Global Legal Entity Identifier Foundation · three times daily
CC0 1.0
build-time snapshotproposed for the data register
IETF Datatracker APIfor reference
IETF · continuous
IETF Trust Legal Provisions (BCP 78)
build-time snapshotproposed for the data register
IETF Datatracker API (document states and histories used as a process benchmark)for reference
IETF · continuous
IETF Trust Legal Provisions (metadata freely available)
direct browser readproposed for the data register
NIST National Vulnerability Database APIs (open data for simulated control exercises)for reference
NIST · continuous
U.S. Government work (public domain in the United States)
governed data serviceproposed for the data register
NIST OSCAL content (SP 800-53 Rev. 5 catalogue in OSCAL JSON)for reference
NIST · on release
U.S. Government work (public domain in the United States)
build-time snapshotproposed for the data register
OpenAlex works API (finding researchers already publishing in an OPEN area)for reference
OurResearch (OpenAlex) · daily
CC0 1.0
build-time snapshotproposed for the data register
OpenAlex works API (literature on standards governance and openness)for reference
OurResearch (OpenAlex) · daily
CC0 1.0
build-time snapshotproposed for the data register
OpenSSF Scorecard public results (reference model for published, machine-run evidence)for reference
OpenSSF · weekly
Apache-2.0 (tool); results published by OpenSSF
build-time snapshotproposed for the data register
ORCID public API (contributor identifiers for attribution)for reference
ORCID · continuous
CC0 1.0 (public data file)
direct browser readproposed for the data register
ORCID public data filefor reference
ORCID · annual
CC0 1.0
build-time snapshotproposed for the data register
RFC Editor index and RSS feed of published RFCs (process documents cited by NS-0)for reference
RFC Editor · on publication
IETF Trust Legal Provisions (RFC text freely available; code components BSD-3-Clause)
direct browser readproposed for the data register
ROR data dump (organisation identifiers for liaison register rows)for reference
Research Organization Registry · monthly
CC0 1.0
build-time snapshotproposed for the data register
ROR data dump (organisation identifiers for publisher and creator fields)for reference
Research Organization Registry · monthly
CC0 1.0
build-time snapshotproposed for the data register
SPDX License List JSONfor reference
SPDX (Linux Foundation) · per release
CC0 1.0
build-time snapshotproposed for the data register
SPDX license-list-data (machine-readable licence identifiers)for reference
SPDX (Linux Foundation) · quarterly
CC0 1.0 (data); licence texts under their own terms
build-time snapshotproposed for the data register
W3C technical reports feedfor reference
W3C · continuous
W3C document licence
build-time snapshotproposed for the data register
W3C technical reports feed (maturity levels of W3C specifications)for reference
W3C · on publication
W3C Document License
build-time snapshotproposed for the data register
Wikidata Query Servicefor reference
Wikimedia Foundation · continuous
CC0 1.0
build-time snapshotproposed for the data register
Zenodo REST API (deposit of test-run evidence bundles with DOIs)for reference
CERN (Zenodo) · continuous
CC0 1.0 (record metadata); files under their stated licence
listed for referenceproposed for the data register
14 indicators named by the areas, each with its framework and code.
Indicator names and codes are given as published by their stewards.
28 references from peer-reviewed and official publications cited in the area profiles, most recent first within each type.
GCRI Canada, The Global Risks Forum (GRF), The Global Risks Alliance (GRA) and Risk Academy work on the subject of this programme in distinct roles (research and evidence; governance, policy and convening; capital, finance and markets; education and training). Each entry states why it corresponds and the step it offers; each institution sets its own terms of participation.
Research and evidence
GCRI Canada
Research programmes that produce the observations, models and assessments these records describe.
Nexus RegistryKeeps public records of programmes, evidence, publication status and corrections, the practice that the identifier and change-record commitments formalise.Apply to this programme Nexus ReportsPublishes versioned, sourced and reviewed reports with an editorial and correction policy, a working model of open, recorded publication.Apply to this programme therisk.globalAll programmes of GCRI CanadaGovernance, policy and convening
The Global Risks Forum (GRF)
Tracks that convene public authorities, researchers and institutions on the governance of shared risks.
Governance NexusCompares authority, oversight and anti-capture arrangements in institutions, the questions that the standards process answers for its own decisions.Join this track Research NexusConvenes research on research integrity and the science-policy interface, the basis of evidence over assertion.Join this track globalriskforum.comAll tracks of The Global Risks ForumCapital, finance and markets
The Global Risks Alliance (GRA)
Industry programmes in which financial institutions build a shared understanding of systemic risk.
Financial Regulation NexusCompares regulatory and supervisory frameworks, the context in which supervised institutions read voluntary standards.Join this programme globalriskalliance.comAll programmes of The Global Risks AllianceEducation and training
Risk Academy
Courses and disciplines that teach the knowledge and methods practitioners need to apply these standards.
Science Policy 101RAF-103 · Introductory · 19.5 learning hoursBringing evidence on risk to decision makers honestly, clearly and usefullyTake this course Policy and GovernanceRAN-307 · Intermediate · 21.5 learning hoursHow institutions, laws and people decide about risk, and how to tell whether policy worksTake this course Clausecraft and LicensingRAT-202 · Intermediate · 20 learning hoursLicences, attribution, data-sharing agreements and risk-transfer clauses for risk tools, at a methods levelTake this course All courses and disciplinesListed in the education and training section of this page4 courses and 6 disciplines of Risk Academy (risksacademy.com) that teach the knowledge and methods of this programme. Each course lists its level, stream and learning hours.
The correspondence between courses, disciplines and the Nexus Standards is maintained with Risk Academy and is subject to its academic review.
Nexus Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Institutions and experts are invited to charter a working group, amend an area brief or propose a data source. National participation is organised through each country's National Nexus Consortium (NNC) and its National Working Groups (NWGs); competent national authorities are engaged through official channels.
Status and use. The Nexus Standards are proposed standards developed through an open process under NS-13 and published for voluntary use; they do not constitute certification, accreditation or regulatory approval, and adoption remains a decision of the Global Standards Council and, in each country, of its National Standards Council. A UNI (Unique Nexus Identifier) identifies an artifact; it does not certify it. Names of standards bodies and their standards belong to their stewards and are used only to identify the documents; no text of an external standard is reproduced here. Nexus Standards is not affiliated with, endorsed by or certified by any standards body named here.
Licences: CC BY 4.0 for standards text, registries, schemas and data; Apache-2.0 for reference code. External standards are cited by name, number and link under their own licences. Third-party data, libraries and fonts keep their own licences: see Third-party notices.