AI Solutions Framework — Enterprise AI-Adoption Control Framework (IG1–IG3)

AI Solutions Framework — Enterprise AI-Adoption Control Framework (IG1–IG3) — 100% of in-scope requirements covered.

15 requirements · 6 in scope (6 enforced) · 9 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

AI Solutions Framework: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. approval-workflow-authority · enforced

    Approval workflow: an AI-supported decision proceeds to a consequential action only under a recorded…

    Rule packs: kye:rule-pack:ai-solutions-framework-authority · Audit events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Constitution: 12 purpose permission

  2. accountability-named-principal · enforced

    Accountability: every AI agent action resolves to exactly one named accountable principal

    Rule packs: kye:rule-pack:ai-solutions-framework-authority · Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Constitution: 12 purpose permission

  3. attestation-due-diligence-before-action · enforced

    Attestation: a required due-diligence / risk attestation is recorded before the AI-supported action proceeds

    Rule packs: kye:rule-pack:ai-solutions-framework-authority · Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1 · Constitution: 13 resilience loop

  4. human-oversight-stage-gate · enforced

    Human-oversight stage gate: a consequential AI action stays advisory until a named human reviewer signs off

    Rule packs: kye:rule-pack:ai-solutions-framework-authority · Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Constitution: 36 governedui

  5. exception-register · enforced

    Exception register: any deviation / override of an AI control is recorded as a signed, replay-provable…

    Rule packs: kye:rule-pack:ai-solutions-framework-authority · Audit events: kye.evidence.decision_map.v1, kye.replay.context_seal.v1, kye.evidence.pack.v1 · Constitution: 13 resilience loop

  6. audit-evidence-provenance-pin · enforced

    Audit & evidence: every consequential AI action emits a signed, replay-derivable provenance pin verifiable…

    Rule packs: kye:rule-pack:ai-solutions-framework-authority · Audit events: kye.evidence.tool_call.v1, kye.replay.context_seal.v1, kye.replay.proof.v1, kye.evidence.pack.v1 · Constitution: 13…

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: The AI Solutions Framework is an enterprise AI-adoption control framework — a prioritised, maturity-tiered (Implementation Group IG1 through IG3) set of ~90 safeguards organised into six control families: AI governance & accountability, AI risk management, AI safety, data privacy & lineage, compliance monitoring, and audit & evidence. Each safeguard defines a control an organisation adopting AI should operate. KYE Protocol™ governs the SUBSET of these safeguards that resolve at the action boundary — the moment an AI-supported decision or agent action moves toward a consequential effect — and PROVES the authority and evidence later. KYE™ governs whether the action may proceed (under a named-authority approval, with the required due-diligence / attestation recorded, held advisory through the human-oversight / stage gate, with any exception recorded), and emits the §0.3 evidence chain. KYE™ does not author the governance policy, run the risk committee, maintain the AI inventory, deliver the training, or verify the deploy-time infrastructure posture — those organisational and CSPM safeguards are ceded honestly to their owning roles. · License: The AI Solutions Framework is referenced descriptively as an enterprise AI-adoption control framework; KYE™ registry cites its control families for mapping purposes and asserts no ownership of the framework text.

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
AI governance & accountability (enforced action-boundary subset)22000100%
AI risk management & safety (enforced action-boundary subset)22000100%
Compliance monitoring & audit/evidence (enforced action-boundary subset)22000100%
Organisational (out-of-scope — governance-office / ciso)500000%
Infrastructure posture / CSPM (out-of-scope — cloud-platform / devsecops)400000%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
ai-solutions-framework.approval-workflow-authorityApproval workflow: an AI-supported decision proceeds to a consequential action only under a recorded named-authority approvalenforcedrule_packs: kye:rule-pack:ai-solutions-framework-authority
dictionaries: internal
engines: internal, internal
audit_events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
ai-solutions-framework.accountability-named-principalAccountability: every AI agent action resolves to exactly one named accountable principalenforcedrule_packs: kye:rule-pack:ai-solutions-framework-authority
engines: internal
audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
ai-solutions-framework.attestation-due-diligence-before-actionAttestation: a required due-diligence / risk attestation is recorded before the AI-supported action proceedsenforcedrule_packs: kye:rule-pack:ai-solutions-framework-authority
dictionaries: internal
engines: internal, internal
audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1
constitution_refs: constitution/13-RESILIENCE-LOOP.md
ai-solutions-framework.human-oversight-stage-gateHuman-oversight stage gate: a consequential AI action stays advisory until a named human reviewer signs offenforcedrule_packs: kye:rule-pack:ai-solutions-framework-authority
engines: internal, internal
audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1
constitution_refs: constitution/36-GOVERNEDUI.md
ai-solutions-framework.exception-registerException register: any deviation / override of an AI control is recorded as a signed, replay-provable exceptionenforcedrule_packs: kye:rule-pack:ai-solutions-framework-authority
dictionaries: internal
engines: internal
audit_events: kye.evidence.decision_map.v1, kye.replay.context_seal.v1, kye.evidence.pack.v1
constitution_refs: constitution/13-RESILIENCE-LOOP.md
ai-solutions-framework.audit-evidence-provenance-pinAudit & evidence: every consequential AI action emits a signed, replay-derivable provenance pin verifiable offlineenforcedrule_packs: kye:rule-pack:ai-solutions-framework-authority
engines: internal, internal
audit_events: kye.evidence.tool_call.v1, kye.replay.context_seal.v1, kye.replay.proof.v1, kye.evidence.pack.v1
constitution_refs: constitution/13-RESILIENCE-LOOP.md, constitution/30-AUDIT-WORM-RETENTION.md
ai-solutions-framework.ai-governance-boardAI governance board / steering committee established with a charter and decision rightsout-of-scope(no enforcement cited)
ai-solutions-framework.ai-system-inventoryAuthoritative inventory of AI systems, models, and use-cases maintainedout-of-scope(no enforcement cited)
ai-solutions-framework.ai-acceptable-use-policyAI acceptable-use and governance policy documents authored, approved, and publishedout-of-scope(no enforcement cited)
ai-solutions-framework.ai-workforce-trainingRole-based AI-risk and responsible-use training delivered and trackedout-of-scope(no enforcement cited)
ai-solutions-framework.ai-risk-committee-reviewPeriodic AI-risk committee review of the AI risk register and treatment plansout-of-scope(no enforcement cited)
ai-solutions-framework.model-inference-logging-enabledModel / inference logging enabled and centrally collected at the platform layerout-of-scope(no enforcement cited)
ai-solutions-framework.ai-data-storage-encryptionAI training / inference data stores encrypted at rest and in transitout-of-scope(no enforcement cited)
ai-solutions-framework.ai-iam-least-privilegeIAM roles for AI workloads enforce least-privilege (no wildcard grants)out-of-scope(no enforcement cited)
ai-solutions-framework.ai-network-egress-postureNetwork egress controls for AI workloads restrict outbound calls to approved endpointsout-of-scope(no enforcement cited)

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.