Appendix D: Bibliography of Cited Sources

289 distinct primary sources cited across the compendium, with evidence tiers defined in the methodology. Each entry lists the Parts citing it.

• https://aclanthology.org/2025.acl-long.399/: cited in Part(s) III.D
• https://aclanthology.org/2025.coling-main.146/: cited in Part(s) III.B
• https://aclanthology.org/2025.coling-main.21/: cited in Part(s) III.B
• https://aclanthology.org/2025.emnlp-main.714/: cited in Part(s) III.A
• https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-16: cited in Part(s) V
• https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-55: cited in Part(s) III.D
• https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-72: cited in Part(s) V
• https://ai-incidents.mitre.org/: cited in Part(s) III.D
• https://ai.meta.com/static-resource/meta-frontier-ai-framework/: cited in Part(s) IV
• https://ai.meta.com/tools/system-cards/: cited in Part(s) IV
• https://airc.nist.gov/docs/NIST_AI_RMF_to_ISO_IEC_42001_Crosswalk.pdf: cited in Part(s) II
• https://airisk.mit.edu/: cited in Part(s) I
• https://alignment.anthropic.com/2026/hot-mess-of-ai/: cited in Part(s) I
• https://artificialintelligenceact.eu/: cited in Part(s) V
• https://artificialintelligenceact.eu/article/11/: cited in Part(s) II, V
• https://artificialintelligenceact.eu/article/15/: cited in Part(s) V
• https://artificialintelligenceact.eu/article/43/: cited in Part(s) IV
• https://arxiv.org/abs/1412.3756: cited in Part(s) VI
• https://arxiv.org/abs/1610.08452: cited in Part(s) VI
• https://arxiv.org/abs/1611.08219: cited in Part(s) III.C
• https://arxiv.org/abs/1703.00056: cited in Part(s) VI
• https://arxiv.org/abs/1711.06664: cited in Part(s) III.C
• https://arxiv.org/abs/1810.03993: cited in Part(s) IV
• https://arxiv.org/abs/1812.04606: cited in Part(s) III.D
• https://arxiv.org/abs/2001.00973: cited in Part(s) IV
• https://arxiv.org/abs/2208.13893: cited in Part(s) III.A
• https://arxiv.org/abs/2303.03886: cited in Part(s) IV
• https://arxiv.org/abs/2303.18190: cited in Part(s) IV
• https://arxiv.org/abs/2304.02819: cited in Part(s) VI
• https://arxiv.org/abs/2306.13701: cited in Part(s) IV
• https://arxiv.org/abs/2311.04850: cited in Part(s) I
• https://arxiv.org/abs/2311.12983: cited in Part(s) III.B
• https://arxiv.org/abs/2312.06942: cited in Part(s) III.B, III.C
• https://arxiv.org/abs/2312.11671: cited in Part(s) III.B
• https://arxiv.org/abs/2312.15058: cited in Part(s) III.E/F
• https://arxiv.org/abs/2402.05160: cited in Part(s) IV
• https://arxiv.org/abs/2402.14904: cited in Part(s) III.A
• https://arxiv.org/abs/2403.13793: cited in Part(s) III.B
• https://arxiv.org/abs/2404.01475: cited in Part(s) III.B
• https://arxiv.org/abs/2406.12045: cited in Part(s) III.A
• https://arxiv.org/abs/2408.12622: cited in Part(s) I
• https://arxiv.org/abs/2408.15221: cited in Part(s) III.B
• https://arxiv.org/abs/2410.07095: cited in Part(s) III.B
• https://arxiv.org/abs/2411.05285: cited in Part(s) III.D
• https://arxiv.org/abs/2411.17693: cited in Part(s) III.C
• https://arxiv.org/abs/2412.04984: cited in Part(s) I
• https://arxiv.org/abs/2501.08365: cited in Part(s) III.A
• https://arxiv.org/abs/2501.14778: cited in Part(s) III.D
• https://arxiv.org/abs/2502.14143: cited in Part(s) I
• https://arxiv.org/abs/2503.16861: cited in Part(s) III.E/F
• https://arxiv.org/abs/2503.18666: cited in Part(s) III.C
• https://arxiv.org/abs/2504.10374: cited in Part(s) I, III.C
• https://arxiv.org/abs/2504.11703: cited in Part(s) III.A
• https://arxiv.org/abs/2505.01420: cited in Part(s) I
• https://arxiv.org/abs/2505.10609: cited in Part(s) III.E/F
• https://arxiv.org/abs/2506.01333: cited in Part(s) III.A
• https://arxiv.org/abs/2506.14682: cited in Part(s) III.B
• https://arxiv.org/abs/2507.02825: cited in Part(s) III.B
• https://arxiv.org/abs/2510.24383: cited in Part(s) III.C
• https://arxiv.org/abs/2510.26752: cited in Part(s) I, III.C
• https://arxiv.org/abs/2511.02997: cited in Part(s) III.C
• https://arxiv.org/abs/2511.05613: cited in Part(s) III.E/F
• https://arxiv.org/abs/2511.09904: cited in Part(s) III.B
• https://arxiv.org/abs/2511.14136: cited in Part(s) III.B
• https://arxiv.org/abs/2512.16310: cited in Part(s) III.B
• https://arxiv.org/abs/2512.16433: cited in Part(s) I, VI
• https://arxiv.org/abs/2601.11916: cited in Part(s) III.B
• https://arxiv.org/abs/2601.16398: cited in Part(s) I
• https://arxiv.org/abs/2601.23045: cited in Part(s) I
• https://arxiv.org/abs/2602.10153: cited in Part(s) III.C
• https://arxiv.org/abs/2602.11510: cited in Part(s) III.B
• https://arxiv.org/abs/2602.15198: cited in Part(s) III.E/F
• https://arxiv.org/abs/2602.20628: cited in Part(s) III.C
• https://arxiv.org/abs/2603.04259: cited in Part(s) I
• https://arxiv.org/abs/2603.06847: cited in Part(s) I
• https://arxiv.org/abs/2603.16586: cited in Part(s) III.C
• https://arxiv.org/abs/2604.01151: cited in Part(s) I, III.E/F
• https://arxiv.org/abs/2604.02500: cited in Part(s) I
• https://arxiv.org/abs/2604.15384: cited in Part(s) III.C
• https://arxiv.org/abs/2604.16338: cited in Part(s) III.E/F
• https://arxiv.org/abs/2604.19784: cited in Part(s) I
• https://arxiv.org/abs/2605.01147: cited in Part(s) I
• https://arxiv.org/abs/2605.04019: cited in Part(s) III.B
• https://arxiv.org/abs/2605.08545: cited in Part(s) III.B, III.C
• https://arxiv.org/abs/2605.09684: cited in Part(s) III.C
• https://arxiv.org/abs/2605.16282: cited in Part(s) III.B
• https://arxiv.org/abs/2605.23055: cited in Part(s) III.B
• https://arxiv.org/abs/2605.29178: cited in Part(s) III.E/F
• https://arxiv.org/abs/2605.30322: cited in Part(s) III.B
• https://arxiv.org/abs/2605.30348: cited in Part(s) III.A
• https://arxiv.org/abs/2605.30406: cited in Part(s) I, III.C
• https://arxiv.org/abs/2606.01581: cited in Part(s) III.D
• https://arxiv.org/abs/2606.04037: cited in Part(s) III.E/F
• https://arxiv.org/abs/2606.05391: cited in Part(s) III.C
• https://arxiv.org/abs/2606.05647: cited in Part(s) III.C
• https://arxiv.org/abs/2606.06529: cited in Part(s) III.B
• https://arxiv.org/abs/2606.08960: cited in Part(s) III.B
• https://arxiv.org/abs/2606.10747: cited in Part(s) I, III.D
• https://arxiv.org/abs/2606.11998: cited in Part(s) III.C, III.D, III.E/F
• https://arxiv.org/abs/2606.12442: cited in Part(s) I
• https://arxiv.org/abs/2606.13003: cited in Part(s) III.E/F
• https://arxiv.org/abs/2606.13474: cited in Part(s) I, III.D
• https://arxiv.org/abs/2606.16710: cited in Part(s) III.E/F
• https://arxiv.org/abs/2606.20408: cited in Part(s) I
• https://arxiv.org/abs/2606.22484: cited in Part(s) III.C
• https://arxiv.org/abs/2606.28425: cited in Part(s) I, III.E/F
• https://arxiv.org/abs/2606.29604: cited in Part(s) III.B
• https://arxiv.org/abs/2606.30449: cited in Part(s) II
• https://arxiv.org/abs/2606.30986: cited in Part(s) I
• https://arxiv.org/abs/2606.31935: cited in Part(s) III.E/F
• https://arxiv.org/abs/2607.00155: cited in Part(s) III.C
• https://arxiv.org/abs/2607.01793: cited in Part(s) I
• https://arxiv.org/abs/2607.02201: cited in Part(s) I
• https://arxiv.org/abs/2607.02389: cited in Part(s) III.A
• https://arxiv.org/abs/2607.02514: cited in Part(s) III.E/F
• https://arxiv.org/abs/2607.02586: cited in Part(s) I, III.B
• https://arxiv.org/abs/2607.03423: cited in Part(s) III.C
• https://arxiv.org/abs/2607.06807: cited in Part(s) III.D
• https://arxiv.org/abs/2607.07359: cited in Part(s) V
• https://arxiv.org/abs/2607.07695: cited in Part(s) I, III.E/F
• https://arxiv.org/abs/2607.08395: cited in Part(s) III.C
• https://arxiv.org/abs/2607.09510: cited in Part(s) I
• https://arxiv.org/abs/2607.10534: cited in Part(s) III.D
• https://arxiv.org/abs/2607.13037: cited in Part(s) III.A
• https://arxiv.org/abs/2607.13718: cited in Part(s) III.A
• https://arxiv.org/abs/2607.14516: cited in Part(s) I
• https://assets.amazon.science/a7/7c/8bdade5c4eda9168f3dee6434fff/pc-amazon-frontier-model-safety-framework-2-7-final-2-9.pdf: cited in Part(s) IV
• https://assets.publishing.service.gov.uk/media/65c0b6bd63a23d0013c821a0/implementing_the_uk_ai_regulatory_principles_guidance_for_regulators.pdf: cited in Part(s) V
• https://bidenwhitehouse.archives.gov/wp-content/uploads/2022/09/M-22-18.pdf: cited in Part(s) III.A
• https://blog.trailofbits.com/2025/04/21/jumping-the-line-how-mcp-servers-can-attack-you-before-you-ever-use-them/: cited in Part(s) III.D
• https://cawg.io/identity/1.2/: cited in Part(s) III.E/F
• https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/final/en-us/microsoft-brand/documents/Microsoft-Frontier-Governance-Framework.pdf: cited in Part(s) IV
• https://cdn.sanity.io/files/4zrzovbb/website/c11e84981d0a7281a1b229f3fa6af0da66eaf43f.pdf: cited in Part(s) IV
• https://content.leg.colorado.gov/sites/default/files/2024a_205_signed.pdf: cited in Part(s) V
• https://data.x.ai/2025-08-20-xai-risk-management-framework.pdf: cited in Part(s) IV
• https://deepmind.google/blog/investing-in-multi-agent-ai-safety-research/: cited in Part(s) I
• https://deepmind.google/blog/securing-the-future-of-ai-agents/: cited in Part(s) II, III.D
• https://deepmind.google/discover/blog/updating-the-frontier-safety-framework/: cited in Part(s) IV
• https://digital-strategy.ec.europa.eu/en/policies/guidelines-ai-high-risk-systems: cited in Part(s) V
• https://dl.acm.org/doi/10.1145/3351095.3372873: cited in Part(s) IV
• https://doi.org/10.1016/j.clsr.2022.105681: cited in Part(s) III.C
• https://doi.org/10.1016/j.jfineco.2021.05.047: cited in Part(s) VI
• https://doi.org/10.1111/jofi.13090: cited in Part(s) VI
• https://doi.org/10.1145/3514094.3534154: cited in Part(s) VI
• https://doi.org/10.1145/3514094.3534181: cited in Part(s) III.E/F
• https://doi.org/10.1145/3805689.3806497: cited in Part(s) III.A
• https://doi.org/10.1145/3805689.3806739: cited in Part(s) II
• https://doi.org/10.1145/3805689.3812365: cited in Part(s) III.B
• https://doi.org/10.1145/3805689.3812402: cited in Part(s) III.C
• https://doi.org/10.1177/17456916231181102: cited in Part(s) II
• https://ec.europa.eu/newsroom/article29/items/612053: cited in Part(s) V
• https://finreglab.org/research/machine-learning-explainability-fairness-insights-from-consumer-lending/: cited in Part(s) VI
• https://fortune.com/2026/06/10/anthropic-accu-claude-fable-5-limits-capabilities-ai-researchers-developers/: cited in Part(s) III.B
• https://genai.owasp.org/resource/cheatsheet-a-practical-guide-for-securely-using-third-party-mcp-servers-1-0/: cited in Part(s) III.E/F
• https://genai.owasp.org/resource/genai-incident-response-guide-1-0/: cited in Part(s) III.D
• https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/: cited in Part(s) I
• https://github.com/METR/public-tasks: cited in Part(s) III.B
• https://github.com/METR/vivaria: cited in Part(s) III.B
• https://github.com/NVIDIA/NeMo-Guardrails: cited in Part(s) III.C
• https://github.com/NannyML/nannyml: cited in Part(s) III.D
• https://github.com/SolasAI/solas-ai-disparity: cited in Part(s) VI
• https://github.com/UKGovernmentBEIS/inspect_evals: cited in Part(s) III.B
• https://github.com/aypan17/machiavelli: cited in Part(s) I
• https://github.com/centerforaisafety/wmdp: cited in Part(s) III.B
• https://github.com/eqtylab/mcp-guardian: cited in Part(s) III.D
• https://github.com/evidentlyai/evidently: cited in Part(s) III.D
• https://github.com/humanlayer/humanlayer: cited in Part(s) III.C
• https://github.com/precize/Agentic-AI-Top10-Vulnerability: cited in Part(s) I
• https://github.com/stacklok/toolhive: cited in Part(s) III.C
• https://github.com/trailofbits/mcp-context-protector: cited in Part(s) III.D
• https://github.com/whylabs/whylogs: cited in Part(s) III.D
• https://huggingface.co/docs/hub/datasets-cards: cited in Part(s) IV
• https://huggingface.co/docs/hub/model-cards: cited in Part(s) IV
• https://ico.org.uk/about-the-ico/what-we-do/our-work-on-artificial-intelligence/response-to-the-consultation-series-on-generative-ai/: cited in Part(s) V
• https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/: cited in Part(s) V
• https://labs.cloudsecurityalliance.org/agentic/agentic-nist-ai-rmf-profile-v1/: cited in Part(s) III.A, III.C, III.E/F
• https://lawcat.berkeley.edu/record/1127463: cited in Part(s) VI
• https://learn.microsoft.com/en-us/security/engineering/failure-modes-in-machine-learning: cited in Part(s) I
• https://leg.colorado.gov/bills/sb24-205: cited in Part(s) V
• https://leg.colorado.gov/bills/sb25b-004: cited in Part(s) V
• https://leg.colorado.gov/bills/sb26-189: cited in Part(s) V
• https://media.defense.gov/2022/Sep/01/2003068942/-1/-1/0/ESF_SECURING_THE_SOFTWARE_SUPPLY_CHAIN_DEVELOPERS.PDF: cited in Part(s) III.A
• https://metr.org/blog/2024-03-13-autonomy-evaluation-resources/: cited in Part(s) III.B
• https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r3.pdf: cited in Part(s) III.D
• https://ojs.aaai.org/index.php/AIES/article/view/31733: cited in Part(s) II
• https://ojs.aaai.org/index.php/AIES/article/view/36541: cited in Part(s) III.D
• https://ojs.aaai.org/index.php/AIES/article/view/36570: cited in Part(s) II
• https://ojs.aaai.org/index.php/AIES/article/view/36596: cited in Part(s) III.D
• https://open.canada.ca/data/en/dataset/5423054a-093c-4239-85be-fa0b36ae0b2e: cited in Part(s) III.A
• https://openai.com/index/openai-frontier-governance-framework/: cited in Part(s) IV
• https://openai.com/index/trustworthy-third-party-evaluations-foundations/: cited in Part(s) III.B, III.E/F
• https://proceedings.mlr.press/v202/pan23a.html: cited in Part(s) III.B
• https://proceedings.mlr.press/v235/dai24a.html: cited in Part(s) II
• https://proceedings.mlr.press/v235/zhao24a.html: cited in Part(s) III.B
• https://proceedings.mlr.press/v267/duarte25a.html: cited in Part(s) III.A
• https://proceedings.mlr.press/v267/longpre25a.html: cited in Part(s) III.E/F
• https://proceedings.mlr.press/v267/south25a.html: cited in Part(s) III.E/F
• https://proceedings.mlr.press/v81/buolamwini18a.html: cited in Part(s) II
• https://proceedings.neurips.cc/paper_files/paper/2025/hash/92a0af72659802465884eaad8443ea89-Abstract-Datasets_and_Benchmarks_Track.html: cited in Part(s) I
• https://rm.coe.int/cai-2024-16rev2-methodology-for-the-risk-and-impact-assessment-of-arti/1680b2a09f: cited in Part(s) III.A
• https://scholarship.law.umn.edu/minnlrev/vol106/iss3/2/: cited in Part(s) VI
• https://skylightcyber.com/2019/07/18/cylance-i-kill-you/: cited in Part(s) III.C
• https://storage.googleapis.com/deepmind-media/DeepMind.com/Blog/strengthening-our-frontier-safety-framework/frontier-safety-framework_3.pdf: cited in Part(s) IV
• https://unesdoc.unesco.org/ark:/48223/pf0000386276: cited in Part(s) III.A
• https://webstore.iec.ch/en/publication/107659: cited in Part(s) II, III.A
• https://webstore.iec.ch/en/publication/108460: cited in Part(s) IV
• https://webstore.iec.ch/en/publication/26359: cited in Part(s) I
• https://www.aisi.gov.uk/blog/more-compute-more-capability-why-ai-agent-evals-need-to-account-for-test-time-compute: cited in Part(s) III.B
• https://www.anthropic.com/news/responsible-scaling-policy-v3: cited in Part(s) III.C
• https://www.anthropic.com/responsible-scaling-policy/rsp-v3-0: cited in Part(s) IV
• https://www.anthropic.com/rsp-updates: cited in Part(s) IV
• https://www.bankingsupervision.europa.eu/ecb/pub/pdf/ssm.supervisory_guide202507.en.pdf: cited in Part(s) IV
• https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/responsible-use-ai/algorithmic-impact-assessment.html: cited in Part(s) II
• https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/responsible-use-ai/guide-scope-directive-automated-decision-making.html: cited in Part(s) V
• https://www.cga.ct.gov/2023/act/Pa/pdf/2023PA-00016-R00SB-01103-PA.PDF: cited in Part(s) V
• https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form: cited in Part(s) III.A
• https://www.cisa.gov/resources-tools/resources/software-acquisition-guide-government-enterprise-consumers-software-assurance-cyber-supply-chain: cited in Part(s) III.A
• https://www.cisa.gov/sites/default/files/2024-08/SECURING_THE_SOFTWARE_SUPPLY_CHAIN_SUPPLIERS_508.pdf: cited in Part(s) III.A
• https://www.coe.int/en/web/artificial-intelligence/huderia-risk-and-impact-assessment-of-ai-systems: cited in Part(s) III.A
• https://www.coe.int/en/web/digital-governance/news/-/asset_publisher/xvn9udjV9qug/content/huderia-in-action-council-of-europe-s-ai-risk-and-impact-assessment-methodology-piloted-with-businesses-in-ukraine: cited in Part(s) III.A
• https://www.consilium.europa.eu/en/press/press-releases/2026/05/07/artificial-intelligence-council-and-parliament-agree-to-simplify-and-streamline-rules/: cited in Part(s) V
• https://www.consumerfinance.gov/about-us/blog/innovation-spotlight-providing-adverse-action-notices-when-using-ai-ml-models/: cited in Part(s) VI
• https://www.consumerfinance.gov/compliance/circulars/circular-2022-03-adverse-action-notification-requirements-in-connection-with-credit-decisions-based-on-complex-algorithms/: cited in Part(s) VI
• https://www.consumerfinance.gov/compliance/circulars/circular-2023-03-adverse-action-notification-requirements-and-the-proper-use-of-the-cfpbs-sample-forms-provided-in-regulation-b/: cited in Part(s) VI
• https://www.consumerfinance.gov/data-research/hmda/: cited in Part(s) VI
• https://www.deloitte.com/us/en/programs/center-for-board-effectiveness/articles/board-of-directors-governance-framework-artificial-intelligence.html: cited in Part(s) II
• https://www.dhs.gov/sites/default/files/2024-11/24_1114_dhs_ai-roles-and-responsibilities-framework-508.pdf: cited in Part(s) II
• https://www.ecfr.gov/current/title-12/chapter-X/part-1002: cited in Part(s) V
• https://www.eeoc.gov/select-issues-assessing-adverse-impact-software-algorithms-and-artificial-intelligence-used: cited in Part(s) VI
• https://www.fca.org.uk/news/speeches/rethinking-regulation-age-ai: cited in Part(s) V
• https://www.fdic.gov/news/financial-institution-letters/2026/agencies-revise-interagency-model-risk-management-guidance: cited in Part(s) V
• https://www.fdic.gov/news/inactive-financial-institution-letters/2017/adoption-supervisory-guidance-model-risk-management: cited in Part(s) V
• https://www.federalregister.gov/documents/2026/01/14/2026-00590/huds-implementation-of-the-fair-housing-acts-disparate-impact-standard: cited in Part(s) VI
• https://www.federalreserve.gov/boarddocs/srletters/2011/sr1107.htm: cited in Part(s) V
• https://www.federalreserve.gov/supervisionreg/srletters/SR2108.htm: cited in Part(s) II
• https://www.federalreserve.gov/supervisionreg/srletters/SR2602.htm: cited in Part(s) II, V
• https://www.federalreserve.gov/supervisionreg/srletters/SR2602.pdf: cited in Part(s) V
• https://www.federalreserve.gov/supervisionreg/srletters/sr1107.htm: cited in Part(s) II
• https://www.finra.org/rules-guidance/guidance/reports/2024-finra-annual-regulatory-oversight-report: cited in Part(s) V
• https://www.finra.org/rules-guidance/guidance/reports/2026-finra-annual-regulatory-oversight-report/gen-ai: cited in Part(s) V
• https://www.finra.org/rules-guidance/notices/24-09: cited in Part(s) V
• https://www.finra.org/sites/default/files/2020-06/ai-report-061020.pdf: cited in Part(s) V
• https://www.frontiermodelforum.org/technical-reports/risk-taxonomy-and-thresholds/: cited in Part(s) I
• https://www.frontiermodelforum.org/uploads/2025/06/FMF-Technical-Report-on-Frontier-Risk-Taxonomy-and-Thresholds.pdf: cited in Part(s) I
• https://www.gao.gov/products/gao-21-519sp: cited in Part(s) II
• https://www.gov.uk/government/publications/trusted-third-party-ai-assurance-roadmap/trusted-third-party-ai-assurance-roadmap: cited in Part(s) III.E/F
• https://www.governance.ai/research-paper/structured-access-for-third-party-research-on-frontier-ai-models: cited in Part(s) III.E/F
• https://www.helpnetsecurity.com/2026/06/12/nist-iso-frameworks-govern-ai-agents/: cited in Part(s) II, III.A, III.D, III.E/F
• https://www.ibm.com/impact/ai-ethics: cited in Part(s) II
• https://www.investor.gov/introduction-investing/general-resources/news-alerts/alerts-bulletins/investor-alerts/artificial-intelligence-fraud: cited in Part(s) V
• https://www.iosco.org/library/pubdocs/pdf/IOSCOPD823.pdf: cited in Part(s) III.E/F
• https://www.isaca.org/about-us/newsroom/press-releases/2026/isaca-launches-future-ready-it-audit-framework-update-to-strengthen-digital-trust: cited in Part(s) IV
• https://www.iso.org/standard/19011: cited in Part(s) IV
• https://www.iso.org/standard/42001: cited in Part(s) II
• https://www.iso.org/standard/42005: cited in Part(s) III.A, IV
• https://www.iso.org/standard/42006: cited in Part(s) IV
• https://www.iso.org/standard/46568.html: cited in Part(s) IV
• https://www.iso.org/standard/56510.html: cited in Part(s) IV
• https://www.iso.org/standard/56641.html: cited in Part(s) IV
• https://www.iso.org/standard/57950.html: cited in Part(s) IV
• https://www.iso.org/standard/61651.html: cited in Part(s) IV
• https://www.iso.org/standard/74033.html: cited in Part(s) III.D
• https://www.iso.org/standard/74292.html: cited in Part(s) II
• https://www.iso.org/standard/77304.html: cited in Part(s) IV
• https://www.iso.org/standard/78974.html: cited in Part(s) III.D
• https://www.iso.org/standard/81092.html: cited in Part(s) II
• https://www.iso.org/standard/81230.html: cited in Part(s) II
• https://www.iso.org/standard/84127.html: cited in Part(s) II
• https://www.justice.gc.ca/eng/csj-sjc/pl/charter-charte/c27_1.html: cited in Part(s) V
• https://www.law.cornell.edu/cfr/text/12/1002.9: cited in Part(s) VI
• https://www.law.cornell.edu/uscode/text/15/1691: cited in Part(s) VI
• https://www.longtermresilience.org/wp-content/uploads/2024/06/AI-incident-reporting_-Addressing-a-gap-in-the-UKs-regulation-of-AI-1.pdf: cited in Part(s) III.D
• https://www.maine.gov/pfr/consumercredit/laws_rules/new/pl294.pdf: cited in Part(s) V
• https://www.microsoft.com/en-us/security/blog/2025/04/24/new-whitepaper-outlines-the-taxonomy-of-failure-modes-in-ai-agents/: cited in Part(s) I
• https://www.microsoft.com/en-us/security/blog/2026/06/04/updating-taxonomy-failure-modes-agentic-ai-systems-year-red-teaming-taught-us/: cited in Part(s) I
• https://www.mitre.org/news-insights/news-release/mitre-launches-ai-incident-sharing-initiative: cited in Part(s) III.D
• https://www.njoag.gov/wp-content/uploads/2025/12/N.J.A.C.-13-16-Disparate-Impact-Discrimination.pdf: cited in Part(s) VI
• https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-developing-and-training-generative-ai-models: cited in Part(s) V
• https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-the-use-of-commercially-available-ai-products: cited in Part(s) V
• https://www.occ.gov/news-issuances/bulletins/2011/bulletin-2011-12.html: cited in Part(s) II
• https://www.occ.gov/news-issuances/bulletins/2026/bulletin-2026-13.html: cited in Part(s) II, V
• https://www.oecd.org/content/dam/oecd/en/publications/reports/2025/02/towards-a-common-reporting-framework-for-ai-incidents_8c488fdb/f326d4ac-en.pdf: cited in Part(s) III.D
• https://www.parl.ca/legisinfo/en/bill/44-1/c-27: cited in Part(s) V
• https://www.rusi.org/explore-our-research/publications/insights-papers/developing-framework-secure-third-party-access-frontier-ai: cited in Part(s) III.E/F
• <https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182&fileName=3%20CCR%20702-10>: cited in Part(s) V
• https://www.tbs-sct.canada.ca/pol/doc-eng.aspx?id=32592: cited in Part(s) V
• https://www.theiia.org/globalassets/site/content/tools/professional/aiframework-sept-2024-update.pdf: cited in Part(s) IV
• https://www.unesco.org/ethics-ai/en/eia: cited in Part(s) III.A
• https://www.warner.senate.gov/newsroom/press-releases/warner-unveils-discussion-draft-of-legislation-to-create-innovative-market-for-secure-artificial-intelligence-agents/: cited in Part(s) III.A, III.E/F