# Model Promotion Governance

Artifact immutability/integrity requirements and the boundary between agent-recorded classification and owner-determined conformity.

- Model promotion promotes exactly one immutable, integrity-verified model artifact per approval.
- A pickle/joblib artifact executes code on load; unverified provenance or integrity is therefore a mandatory-refuse condition, not a discretionary one.
- AI Risk Management Framework governance and EU AI Act role/conformity determinations belong to the organization's qualified owners; this agent records classification inputs but never certifies conformity.

## Sources

- https://www.nist.gov/itl/ai-risk-management-framework
- https://eur-lex.europa.eu/eli/reg/2024/1689/oj
- https://www.iso.org/standard/81230.html