---
title: "KYE Protocol™ for the public sector — runtime authority for citizen-facing AI"
description: "Runtime authority and signed evidence for public-sector AI under ATRS, OECD AI Principles, NIST AI RMF, Data Use and Access Act 2025, and public-sector AI assurance regimes. Sovereign-cloud deployment + offline-verifiable audit."
url: https://kyeprotocol.com/sovereign-ai/public-sector/
lang: en
source: "KYE Protocol"
---

> Runtime authority and signed evidence for public-sector AI under ATRS, OECD AI Principles, NIST AI RMF, Data Use and Access Act 2025, and public-sector AI assurance regimes. Sovereign-cloud deployment + offline-verifiable audit.

apartment Public sector

# Runtime authority for citizen-facing AI.

When a citizen complaint, an ICO referral, a parliamentary question or a judicial-review case asks _who or what acted, on whose authority, under what oversight_ — KYE Protocol™ produces a contemporaneous, signed, replayable record. Not assembled by counsel after the FOI request. Sealed at the moment the AI shaped the decision.

[Apply for public-sector pilot](https://kyeprotocol.com/pilot-apply/) [Coverage maps](https://kyeprotocol.com/compliance/coverage/)

Public-sector AI accountability frameworks

## The contemporaneous-record requirement, by reference.

[UK ATRS (Algorithmic Transparency Recording Standard) Cabinet Office + CDDO. The KYE™ Evidence Pack™ populates the ATRS transparency record from the runtime decision, not from a quarterly catalogue refresh.](https://kyeprotocol.com/compliance/uk-atrs/)

### AI Playbook for the UK Government + DSIT AI Assurance

DSIT / CDDO / i.AI. The [AI Playbook](https://kyeprotocol.com/compliance/uk-gov-ai-playbook/) accountability / human-control / secure-use principles and the [DSIT AI Assurance](https://kyeprotocol.com/compliance/uk-ai-assurance/) six mechanisms map to named-authority, sign-off, and signed Evidence Packs™.

### HMT Orange & Magenta Books + ISO 9000:2015

Risk management ([Orange Book](https://kyeprotocol.com/compliance/uk-orange-book/)), evaluation of AI interventions ([Magenta Book](https://kyeprotocol.com/compliance/uk-magenta-book/)), and quality-management objective evidence / validation ([ISO 9000:2015](https://kyeprotocol.com/compliance/iso-9000-2015/)) — honest, per-requirement coverage. [Public-sector AI testing & assurance](https://kyeprotocol.com/compliance/uk-ai-testing-assurance-public-sector/) covers pre-deployment and in-life.

### OECD AI Principles

Inclusive growth · human-centred values · transparency · robustness · accountability. Signed Evidence Pack™ per decision satisfies the accountability and traceability principles end-to-end.

[NIST AI RMF 1.0 Govern, Map, Measure, Manage. The Measure + Manage functions map directly to KYE™ runtime-evidence + revocation primitives.](https://kyeprotocol.com/regulatory-coverage/#nist-ai-rmf)

### UK Data (Use and Access) Act 2025

Automated-decision provisions + Information Commissioner powers + cross-government data-sharing regime. KYE™ records keep the data-use trail contemporaneous.

[NHS DSPT + DCB 0129 / 0160 For public-sector health bodies. KYE™ binds the clinical-safety case to the runtime decision; see clinical AI.](https://kyeprotocol.com/clinical-ai/)

### FOI / Subject-access compatibility

Evidence Packs™ structured to satisfy FOI + DSAR requests: replayable, redactable where statutory exemptions apply, signed end-to-end.

Public-sector deployment

## Sovereign cloud, citizen-held privacy, parliamentary-grade audit.

- **Sovereign cloud** — UK G-Cloud, EU GAIA-X, Crown Hosting, or the customer's own data-centre / OFFICIAL-SENSITIVE-eligible region.
- **Customer KMS** — signing keys live in the department's HSM; KYE™ never has access.
- **Open verifier** — any oversight body (NAO, PHSO, ICO, equivalent) can replay an Evidence Pack™ using only the publisher's JWKS — no vendor dependency in the audit path.
- **Right-to-erasure + statutory exemptions** — PII referenced by URN, not embedded; redaction obligations are first-class lifecycle states.
- **Apache 2.0 schemas + vocabulary** — the proof formats are open. Departmental procurement evaluates the protocol, not just the vendor.

Public-sector pilot

## Shadow first. ATRS records before any enforcement.

Public-sector pilots begin in shadow mode — KYE™ observes one delegated-action workflow and produces ATRS-aligned signed Evidence Packs™ without blocking production. After the evaluation window, the department chooses which Guards to promote to enforce.

[Apply for public-sector pilot](https://kyeprotocol.com/pilot-apply/)

**Independent — no government affiliation.** KYE Protocol™ is an independent protocol and is **not affiliated with, endorsed by, or part of** any government, regulator, or official “Sovereign AI” programme. References to regulators and frameworks describe the requirements KYE™ helps you evidence — not any official relationship.

Canonical KYE™ surfaces referenced on this page: [Evidence Pack™](https://kyeprotocol.com/evidence-pack/) · [KYE Protocol™](https://kyeprotocol.com/).