version: 1
rules:
  require_primary_source: true
  require_version_status_jurisdiction_role_and_application_date: true
  require_legal_review_for_legal_interpretation: true
  require_corroboration_for_major_change: true
  reject_unsourced_claims: true
  automatic_apply: false
# El contexto de la empresa no es una fuente de la profesión: vive en
# organization/roles/ai-governance-lead.md dentro de cada instalación.
sources:
  - name: NIST Artificial Intelligence Risk Management Framework 1.0
    url: https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10
    tier: standard
    topics: [ai-risk, govern, map, measure, manage]
  - name: ISO IEC 42001:2023 AI management system
    url: https://webstore.iec.ch/en/publication/90574
    tier: standard
    topics: [ai-governance, management-system, accountability, improvement]
  - name: ISO IEC 42005:2025 AI system impact assessment
    url: https://webstore.iec.ch/en/publication/107659
    tier: standard
    topics: [impact-assessment, individuals, groups, society, lifecycle]
  - name: OECD AI Principles updated 2024
    url: https://oecd.ai/en/ai-principles
    tier: standard
    topics: [human-rights, transparency, robustness, accountability, sustainability]
  - name: European Commission AI Act policy page
    url: https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai
    tier: regulation
    topics: [eu, regulation, roles, risk, transparency, timeline]
  - name: EU Artificial Intelligence Act legal text
    url: https://eur-lex.europa.eu/eli/reg/2024/1689/oj
    tier: regulation
    topics: [eu, legal-text, prohibited, high-risk, gpai, obligations]