{"schema":"https://ver.cy/schemas/card/1.0.0","id":"vr.wm-ai-010","code":"wm-ai-010-ai-incident-report","url":"https://ver.cy/models/wm-ai-010-ai-incident-report/","name":"AI Incident Report","alternateNames":[],"kind":"world-model","status":"published","version":"0.3.0-research.1","language":"en","classifiers":{"family":"World Models","category":"Information and virtual systems","entryKind":"aggregate","plane":"","domain":["INF.AI.INC"],"industry":["Cross-industry"],"navPath":"NAV.INF.AI.INC","tags":["ai","incident","report","inf.ai.inc"],"facets":{}},"whatItIs":"Owns report-case identity, version and status; issuer, jurisdiction, legal basis, recipient and reportability assertions; incident, affected-system and party bindings; facts, timeline, context, classification, severity, impact, harm, causal, security and privacy assessments; response and remediation summaries; notification duties, deadlines, submissions, receipts and authority exchanges; approval, confidentiality, communication, evidence, correction, retention, audit and projections. Incident, AI system, model, deployment, investigation, regulatory case, remediation work, harm, vulnerability, evidence, audit and records masters remain external.","purpose":"Represent one governed, versioned AI incident reporting case that makes facts, timeline, affected systems, classification, impact, causal assessments, response, obligations, submissions and corrections machine-readable without absorbing the incident or authority masters.","scope":{"in":["Report identity, version, jurisdiction, legal basis, recipient, affected systems, responsible parties, facts, timeline, context, classification, severity, impact and causal assessments","Security and privacy links, response and remediation summaries, obligations, deadlines, submissions, receipts, authority exchanges, disclosure, lifecycle, evidence, retention, audit and projections"],"out":["Owning the incident, affected AI system, model, deployment, person, organization, harm, investigation, regulatory case, remediation action, vulnerability, evidence, audit or records masters","Treating report receipt, mitigation deployment, system recovery or closure as proof of causality, acceptance, effectiveness, compliance or absence of harm","Autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure"],"boundaries":[{"neighbor":"WM-AI-001 AI System","distinction":"The unified parent signal and candidate reference identify affected-system context but grant no inheritance or ownership. The report binds source-qualified system, model and deployment versions without mutating their masters."},{"neighbor":"WM-ACT-019 Incident","distinction":"The general incident master owns occurrence, operational state and response history. The report owns a versioned communication and submission case about that incident."},{"neighbor":"Investigation, remediation and regulatory case","distinction":"Investigations own methods and findings, remediation work owns actions and verification, and authorities own their cases and decisions. The report stores non-owning summaries, submissions, receipts and exchanges."},{"neighbor":"Security incident and personal-data breach","distinction":"Cybersecurity and privacy regimes may overlap an AI incident but use independent applicability, risk, notification and authority semantics."},{"neighbor":"EU AI Act, OECD, NIST, FIRST, ISO, PROV and RFC profiles","distinction":"These legal, reporting, risk, incident-response, management, provenance and timestamp sources have distinct scopes. No mapping is assumed binding or lossless outside its profile."}]},"distinguishingFeatures":["A reporting case with versions and submissions about an incident, not the incident itself.","Keeps observed fact, reporter statement, hypothesis, causal assessment and authority finding apart.","Does not equate an AI incident with a security incident, data breach or defect, though it may link them.","Carries reportability, recipient and deadline assertions tied to a legal basis."],"structure":{"bundles":[{"id":"report-identity-scope-jurisdiction-and-parties","name":"Report identity, scope, jurisdiction and parties","description":"Groups governed report context for report identity, scope, jurisdiction and parties.","layers":[{"id":"report-root-version-status-and-authority","name":"Report root, version, status and authority","description":"Groups source-qualified report context for report root, version, status and authority.","findings":[{"id":"report-case-identity-type-version-issuer-and-current-head","name":"Report case identity, type, version, issuer and current head","description":"Records report case identity, type, version, issuer and current head as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish report case identity, type, version, issuer and current head?","id":"report-case-identity-type-version-issuer-and-current-head-q01","kind":"identity"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on report case identity, type, version, issuer and current head, under which authority and limits?","id":"report-case-identity-type-version-issuer-and-current-head-q02","kind":"event"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify report case identity, type, version, issuer and current head?","id":"report-case-identity-type-version-issuer-and-current-head-q03","kind":"process"}]},{"id":"jurisdiction-legal-basis-recipient-reportability-and-authority","name":"Jurisdiction, legal basis, recipient, reportability and authority","description":"Records jurisdiction, legal basis, recipient, reportability and authority as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish jurisdiction, legal basis, recipient, reportability and authority?","id":"jurisdiction-legal-basis-recipient-reportability-and-authority-q01","kind":"authority"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on jurisdiction, legal basis, recipient, reportability and authority, under which authority and limits?","id":"jurisdiction-legal-basis-recipient-reportability-and-authority-q02","kind":"temporal"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify jurisdiction, legal basis, recipient, reportability and authority?","id":"jurisdiction-legal-basis-recipient-reportability-and-authority-q03","kind":"validation"}]}]},{"id":"incident-system-and-party-bindings","name":"Incident, system and party bindings","description":"Groups source-qualified report context for incident, system and party bindings.","findings":[{"id":"incident-related-report-affected-system-deployment-model-and-version","name":"Incident, related report, affected system, deployment, model and version","description":"Records incident, related report, affected system, deployment, model and version as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish incident, related report, affected system, deployment, model and version?","id":"incident-related-report-affected-system-deployment-model-and-version-q01","kind":"relationship"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on incident, related report, affected system, deployment, model and version, under which authority and limits?","id":"incident-related-report-affected-system-deployment-model-and-version-q02","kind":"composition"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify incident, related report, affected system, deployment, model and version?","id":"incident-related-report-affected-system-deployment-model-and-version-q03","kind":"privacy"}]},{"id":"reporter-provider-deployer-operator-contact-and-responsibility","name":"Reporter, provider, deployer, operator, contact and responsibility","description":"Records reporter, provider, deployer, operator, contact and responsibility as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish reporter, provider, deployer, operator, contact and responsibility?","id":"reporter-provider-deployer-operator-contact-and-responsibility-q01","kind":"ownership"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on reporter, provider, deployer, operator, contact and responsibility, under which authority and limits?","id":"reporter-provider-deployer-operator-contact-and-responsibility-q02","kind":"evidence"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify reporter, provider, deployer, operator, contact and responsibility?","id":"reporter-provider-deployer-operator-contact-and-responsibility-q03","kind":"lifecycle"}]}]}]},{"id":"occurrence-observation-context-and-timeline","name":"Occurrence, observation, context and timeline","description":"Groups governed report context for occurrence, observation, context and timeline.","layers":[{"id":"event-clock-location-and-evidence-source","name":"Event clock, location and evidence source","description":"Groups source-qualified report context for event clock, location and evidence source.","findings":[{"id":"occurrence-detection-discovery-awareness-notification-and-report-time","name":"Occurrence, detection, discovery, awareness, notification and report time","description":"Records occurrence, detection, discovery, awareness, notification and report time as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish occurrence, detection, discovery, awareness, notification and report time?","id":"occurrence-detection-discovery-awareness-notification-and-report-time-q01","kind":"temporal"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on occurrence, detection, discovery, awareness, notification and report time, under which authority and limits?","id":"occurrence-detection-discovery-awareness-notification-and-report-time-q02","kind":"ownership"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify occurrence, detection, discovery, awareness, notification and report time?","id":"occurrence-detection-discovery-awareness-notification-and-report-time-q03","kind":"quality"}]},{"id":"location-channel-source-observer-confidence-gap-and-unavailability","name":"Location, channel, source, observer, confidence, gap and unavailability","description":"Records location, channel, source, observer, confidence, gap and unavailability as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish location, channel, source, observer, confidence, gap and unavailability?","id":"location-channel-source-observer-confidence-gap-and-unavailability-q01","kind":"evidence"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on location, channel, source, observer, confidence, gap and unavailability, under which authority and limits?","id":"location-channel-source-observer-confidence-gap-and-unavailability-q02","kind":"measurement"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify location, channel, source, observer, confidence, gap and unavailability?","id":"location-channel-source-observer-confidence-gap-and-unavailability-q03","kind":"security"}]}]},{"id":"behavior-sequence-and-operating-context","name":"Behavior, sequence and operating context","description":"Groups source-qualified report context for behavior, sequence and operating context.","findings":[{"id":"behavior-failure-malfunction-output-action-outcome-and-sequence","name":"Behavior, failure, malfunction, output, action, outcome and sequence","description":"Records behavior, failure, malfunction, output, action, outcome and sequence as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish behavior, failure, malfunction, output, action, outcome and sequence?","id":"behavior-failure-malfunction-output-action-outcome-and-sequence-q01","kind":"event"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on behavior, failure, malfunction, output, action, outcome and sequence, under which authority and limits?","id":"behavior-failure-malfunction-output-action-outcome-and-sequence-q02","kind":"exception"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify behavior, failure, malfunction, output, action, outcome and sequence?","id":"behavior-failure-malfunction-output-action-outcome-and-sequence-q03","kind":"retention"}]},{"id":"lifecycle-stage-environment-data-input-output-human-and-tool-context","name":"Lifecycle stage, environment, data, input, output, human and tool context","description":"Records lifecycle stage, environment, data, input, output, human and tool context as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish lifecycle stage, environment, data, input, output, human and tool context?","id":"lifecycle-stage-environment-data-input-output-human-and-tool-context-q01","kind":"composition"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on lifecycle stage, environment, data, input, output, human and tool context, under which authority and limits?","id":"lifecycle-stage-environment-data-input-output-human-and-tool-context-q02","kind":"provenance"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify lifecycle stage, environment, data, input, output, human and tool context?","id":"lifecycle-stage-environment-data-input-output-human-and-tool-context-q03","kind":"interoperability"}]}]}]},{"id":"classification-severity-impact-and-harm","name":"Classification, severity, impact and harm","description":"Groups governed report context for classification, severity, impact and harm.","layers":[{"id":"incident-class-severity-and-causal-threshold","name":"Incident class, severity and causal threshold","description":"Groups source-qualified report context for incident class, severity and causal threshold.","findings":[{"id":"incident-hazard-near-miss-serious-criterion-category-and-severity","name":"Incident, hazard, near miss, serious criterion, category and severity","description":"Records incident, hazard, near miss, serious criterion, category and severity as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish incident, hazard, near miss, serious criterion, category and severity?","id":"incident-hazard-near-miss-serious-criterion-category-and-severity-q01","kind":"classification"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on incident, hazard, near miss, serious criterion, category and severity, under which authority and limits?","id":"incident-hazard-near-miss-serious-criterion-category-and-severity-q02","kind":"process"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify incident, hazard, near miss, serious criterion, category and severity?","id":"incident-hazard-near-miss-serious-criterion-category-and-severity-q03","kind":"decision"}]},{"id":"causal-link-likelihood-attribution-scope-confidence-and-uncertainty","name":"Causal link, likelihood, attribution, scope, confidence and uncertainty","description":"Records causal link, likelihood, attribution, scope, confidence and uncertainty as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish causal link, likelihood, attribution, scope, confidence and uncertainty?","id":"causal-link-likelihood-attribution-scope-confidence-and-uncertainty-q01","kind":"decision"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on causal link, likelihood, attribution, scope, confidence and uncertainty, under which authority and limits?","id":"causal-link-likelihood-attribution-scope-confidence-and-uncertainty-q02","kind":"validation"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify causal link, likelihood, attribution, scope, confidence and uncertainty?","id":"causal-link-likelihood-attribution-scope-confidence-and-uncertainty-q03","kind":"state"}]}]},{"id":"affected-subjects-rights-assets-and-consequences","name":"Affected subjects, rights, assets and consequences","description":"Groups source-qualified report context for affected subjects, rights, assets and consequences.","findings":[{"id":"person-group-right-health-safety-property-infrastructure-and-environment","name":"Person, group, right, health, safety, property, infrastructure and environment","description":"Records person, group, right, health, safety, property, infrastructure and environment as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish person, group, right, health, safety, property, infrastructure and environment?","id":"person-group-right-health-safety-property-infrastructure-and-environment-q01","kind":"measurement"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on person, group, right, health, safety, property, infrastructure and environment, under which authority and limits?","id":"person-group-right-health-safety-property-infrastructure-and-environment-q02","kind":"privacy"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify person, group, right, health, safety, property, infrastructure and environment?","id":"person-group-right-health-safety-property-infrastructure-and-environment-q03","kind":"identity"}]},{"id":"geography-system-service-scale-duration-persistence-and-reversibility","name":"Geography, system, service, scale, duration, persistence and reversibility","description":"Records geography, system, service, scale, duration, persistence and reversibility as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish geography, system, service, scale, duration, persistence and reversibility?","id":"geography-system-service-scale-duration-persistence-and-reversibility-q01","kind":"measurement"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on geography, system, service, scale, duration, persistence and reversibility, under which authority and limits?","id":"geography-system-service-scale-duration-persistence-and-reversibility-q02","kind":"lifecycle"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify geography, system, service, scale, duration, persistence and reversibility?","id":"geography-system-service-scale-duration-persistence-and-reversibility-q03","kind":"classification"}]}]}]},{"id":"cause-security-privacy-investigation-and-evidence","name":"Cause, security, privacy, investigation and evidence","description":"Groups governed report context for cause, security, privacy, investigation and evidence.","layers":[{"id":"cause-contributor-investigation-and-assessment","name":"Cause, contributor, investigation and assessment","description":"Groups source-qualified report context for cause, contributor, investigation and assessment.","findings":[{"id":"model-data-software-hardware-supplier-human-process-and-organization-factor","name":"Model, data, software, hardware, supplier, human, process and organization factor","description":"Records model, data, software, hardware, supplier, human, process and organization factor as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish model, data, software, hardware, supplier, human, process and organization factor?","id":"model-data-software-hardware-supplier-human-process-and-organization-factor-q01","kind":"provenance"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on model, data, software, hardware, supplier, human, process and organization factor, under which authority and limits?","id":"model-data-software-hardware-supplier-human-process-and-organization-factor-q02","kind":"quality"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify model, data, software, hardware, supplier, human, process and organization factor?","id":"model-data-software-hardware-supplier-human-process-and-organization-factor-q03","kind":"relationship"}]},{"id":"root-contributing-factor-hypothesis-investigation-method-finding-and-review","name":"Root or contributing factor, hypothesis, investigation method, finding and review","description":"Records root or contributing factor, hypothesis, investigation method, finding and review as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish root or contributing factor, hypothesis, investigation method, finding and review?","id":"root-contributing-factor-hypothesis-investigation-method-finding-and-review-q01","kind":"validation"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on root or contributing factor, hypothesis, investigation method, finding and review, under which authority and limits?","id":"root-contributing-factor-hypothesis-investigation-method-finding-and-review-q02","kind":"security"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify root or contributing factor, hypothesis, investigation method, finding and review?","id":"root-contributing-factor-hypothesis-investigation-method-finding-and-review-q03","kind":"authority"}]}]},{"id":"security-adversarial-and-personal-data-breach","name":"Security, adversarial and personal-data breach","description":"Groups source-qualified report context for security, adversarial and personal-data breach.","findings":[{"id":"threat-actor-vulnerability-attack-technique-poisoning-evasion-privacy-and-misuse","name":"Threat actor, vulnerability, attack technique, poisoning, evasion, privacy and misuse","description":"Records threat actor, vulnerability, attack technique, poisoning, evasion, privacy and misuse as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish threat actor, vulnerability, attack technique, poisoning, evasion, privacy and misuse?","id":"threat-actor-vulnerability-attack-technique-poisoning-evasion-privacy-and-misuse-q01","kind":"security"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on threat actor, vulnerability, attack technique, poisoning, evasion, privacy and misuse, under which authority and limits?","id":"threat-actor-vulnerability-attack-technique-poisoning-evasion-privacy-and-misuse-q02","kind":"retention"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify threat actor, vulnerability, attack technique, poisoning, evasion, privacy and misuse?","id":"threat-actor-vulnerability-attack-technique-poisoning-evasion-privacy-and-misuse-q03","kind":"requirement"}]},{"id":"personal-data-breach-confidentiality-integrity-availability-risk-and-notification","name":"Personal-data breach, confidentiality, integrity, availability, risk and notification","description":"Records personal-data breach, confidentiality, integrity, availability, risk and notification as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish personal-data breach, confidentiality, integrity, availability, risk and notification?","id":"personal-data-breach-confidentiality-integrity-availability-risk-and-notification-q01","kind":"privacy"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on personal-data breach, confidentiality, integrity, availability, risk and notification, under which authority and limits?","id":"personal-data-breach-confidentiality-integrity-availability-risk-and-notification-q02","kind":"interoperability"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify personal-data breach, confidentiality, integrity, availability, risk and notification?","id":"personal-data-breach-confidentiality-integrity-availability-risk-and-notification-q03","kind":"constraint"}]}]}]},{"id":"response-remediation-notification-and-authority-exchange","name":"Response, remediation, notification and authority exchange","description":"Groups governed report context for response, remediation, notification and authority exchange.","layers":[{"id":"containment-recovery-corrective-and-preventive-action","name":"Containment, recovery, corrective and preventive action","description":"Groups source-qualified report context for containment, recovery, corrective and preventive action.","findings":[{"id":"immediate-containment-safeguard-continuity-recovery-and-residual-risk","name":"Immediate containment, safeguard, continuity, recovery and residual risk","description":"Records immediate containment, safeguard, continuity, recovery and residual risk as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish immediate containment, safeguard, continuity, recovery and residual risk?","id":"immediate-containment-safeguard-continuity-recovery-and-residual-risk-q01","kind":"process"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on immediate containment, safeguard, continuity, recovery and residual risk, under which authority and limits?","id":"immediate-containment-safeguard-continuity-recovery-and-residual-risk-q02","kind":"decision"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify immediate containment, safeguard, continuity, recovery and residual risk?","id":"immediate-containment-safeguard-continuity-recovery-and-residual-risk-q03","kind":"event"}]},{"id":"corrective-preventive-action-owner-due-date-verification-and-effectiveness","name":"Corrective or preventive action, owner, due date, verification and effectiveness","description":"Records corrective or preventive action, owner, due date, verification and effectiveness as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish corrective or preventive action, owner, due date, verification and effectiveness?","id":"corrective-preventive-action-owner-due-date-verification-and-effectiveness-q01","kind":"lifecycle"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on corrective or preventive action, owner, due date, verification and effectiveness, under which authority and limits?","id":"corrective-preventive-action-owner-due-date-verification-and-effectiveness-q02","kind":"state"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify corrective or preventive action, owner, due date, verification and effectiveness?","id":"corrective-preventive-action-owner-due-date-verification-and-effectiveness-q03","kind":"temporal"}]}]},{"id":"obligation-deadline-submission-and-authority-response","name":"Obligation, deadline, submission and authority response","description":"Groups source-qualified report context for obligation, deadline, submission and authority response.","findings":[{"id":"recipient-regime-trigger-awareness-clock-deadline-exception-and-extension","name":"Recipient, regime, trigger, awareness clock, deadline, exception and extension","description":"Records recipient, regime, trigger, awareness clock, deadline, exception and extension as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish recipient, regime, trigger, awareness clock, deadline, exception and extension?","id":"recipient-regime-trigger-awareness-clock-deadline-exception-and-extension-q01","kind":"requirement"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on recipient, regime, trigger, awareness clock, deadline, exception and extension, under which authority and limits?","id":"recipient-regime-trigger-awareness-clock-deadline-exception-and-extension-q02","kind":"identity"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify recipient, regime, trigger, awareness clock, deadline, exception and extension?","id":"recipient-regime-trigger-awareness-clock-deadline-exception-and-extension-q03","kind":"composition"}]},{"id":"initial-intermediate-final-submission-receipt-question-response-and-status","name":"Initial, intermediate or final submission, receipt, question, response and status","description":"Records initial, intermediate or final submission, receipt, question, response and status as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish initial, intermediate or final submission, receipt, question, response and status?","id":"initial-intermediate-final-submission-receipt-question-response-and-status-q01","kind":"relationship"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on initial, intermediate or final submission, receipt, question, response and status, under which authority and limits?","id":"initial-intermediate-final-submission-receipt-question-response-and-status-q02","kind":"classification"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify initial, intermediate or final submission, receipt, question, response and status?","id":"initial-intermediate-final-submission-receipt-question-response-and-status-q03","kind":"evidence"}]}]}]},{"id":"governance-disclosure-lifecycle-records-and-projections","name":"Governance, disclosure, lifecycle, records and projections","description":"Groups governed report context for governance, disclosure, lifecycle, records and projections.","layers":[{"id":"approval-confidentiality-communication-and-public-summary","name":"Approval, confidentiality, communication and public summary","description":"Groups source-qualified report context for approval, confidentiality, communication and public summary.","findings":[{"id":"author-approver-legal-review-attestation-conflict-and-accountability","name":"Author, approver, legal review, attestation, conflict and accountability","description":"Records author, approver, legal review, attestation, conflict and accountability as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish author, approver, legal review, attestation, conflict and accountability?","id":"author-approver-legal-review-attestation-conflict-and-accountability-q01","kind":"authority"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on author, approver, legal review, attestation, conflict and accountability, under which authority and limits?","id":"author-approver-legal-review-attestation-conflict-and-accountability-q02","kind":"relationship"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify author, approver, legal review, attestation, conflict and accountability?","id":"author-approver-legal-review-attestation-conflict-and-accountability-q03","kind":"ownership"}]},{"id":"confidentiality-privilege-trade-secret-minimization-public-summary-and-notice","name":"Confidentiality, privilege, trade secret, minimization, public summary and notice","description":"Records confidentiality, privilege, trade secret, minimization, public summary and notice as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish confidentiality, privilege, trade secret, minimization, public summary and notice?","id":"confidentiality-privilege-trade-secret-minimization-public-summary-and-notice-q01","kind":"privacy"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on confidentiality, privilege, trade secret, minimization, public summary and notice, under which authority and limits?","id":"confidentiality-privilege-trade-secret-minimization-public-summary-and-notice-q02","kind":"authority"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify confidentiality, privilege, trade secret, minimization, public summary and notice?","id":"confidentiality-privilege-trade-secret-minimization-public-summary-and-notice-q03","kind":"measurement"}]}]},{"id":"evidence-correction-retention-audit-and-interoperability","name":"Evidence, correction, retention, audit and interoperability","description":"Groups source-qualified report context for evidence, correction, retention, audit and interoperability.","findings":[{"id":"attachment-evidence-digest-chain-of-custody-source-and-provenance","name":"Attachment, evidence, digest, chain of custody, source and provenance","description":"Records attachment, evidence, digest, chain of custody, source and provenance as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish attachment, evidence, digest, chain of custody, source and provenance?","id":"attachment-evidence-digest-chain-of-custody-source-and-provenance-q01","kind":"evidence"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on attachment, evidence, digest, chain of custody, source and provenance, under which authority and limits?","id":"attachment-evidence-digest-chain-of-custody-source-and-provenance-q02","kind":"requirement"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify attachment, evidence, digest, chain of custody, source and provenance?","id":"attachment-evidence-digest-chain-of-custody-source-and-provenance-q03","kind":"exception"}]},{"id":"draft-submitted-accepted-amended-superseded-closed-reopened-retained-and-projected","name":"Draft, submitted, accepted, amended, superseded, closed, reopened, retained and projected","description":"Records draft, submitted, accepted, amended, superseded, closed, reopened, retained and projected as source-qualified report context while incident, system, investigation, authority, remediation, evidence and records masters remain external.","questions":[{"text":"What stable identity, report version, jurisdiction-qualified value and explicit unknown establish draft, submitted, accepted, amended, superseded, closed, reopened, retained and projected?","id":"draft-submitted-accepted-amended-superseded-closed-reopened-retained-and-projected-q01","kind":"lifecycle"},{"text":"Who observed, asserted, reviewed, approved, received or may rely on draft, submitted, accepted, amended, superseded, closed, reopened, retained and projected, under which authority and limits?","id":"draft-submitted-accepted-amended-superseded-closed-reopened-retained-and-projected-q02","kind":"constraint"},{"text":"Which occurrence, awareness, effective, submitted, recorded, ingested and knowledge times, evidence and uncertainty qualify draft, submitted, accepted, amended, superseded, closed, reopened, retained and projected?","id":"draft-submitted-accepted-amended-superseded-closed-reopened-retained-and-projected-q03","kind":"provenance"}]}]}]}]},"agentConduct":{"may":["Collect source-qualified facts and build a timeline.","Calculate reporting deadlines from the declared legal basis.","Draft initial, intermediate and final report versions for review.","Link related security, privacy and investigation records."],"mustNot":["Submit a report to an authority.","Make a binding legal classification or reportability decision.","Admit liability or assign blame to a person.","Disclose restricted details or personal data of affected people.","Alter facts in a submitted version instead of issuing a correction."],"requiresHuman":["Deciding whether an incident is reportable and to whom.","Approving and submitting a report.","Public disclosure of incident details."]},"ethics":{"considerations":["Affected people deserve timely notice and remedy, so delays in reporting cause real harm.","Reports must protect the identity of affected people and of whistleblowers.","Blame on individual operators can hide systemic causes in design or deployment."],"affectedParties":["People harmed or affected by the AI system","Reporters and whistleblowers","Deployers, providers and authorities"]},"owners":{"steward":"Dimension owner, incident-reporting mandate and accountable AI system owner","roles":[{"name":"AI system owner and accountable deployer","responsibilities":["Own reporting readiness, accountable assessment, response coordination and use of incident reports."]},{"name":"Incident reporter and case coordinator","responsibilities":["Maintain report identity, source-qualified facts, timeline, versions, submissions and authority exchanges."]},{"name":"Technical investigator and AI specialist","responsibilities":["Supply bounded system, model, data, failure, causal and corrective evidence with uncertainty."]},{"name":"Safety, security and privacy responder","responsibilities":["Assess harm, threat, vulnerability, privacy-breach, containment, notification and residual risk profiles."]},{"name":"Legal, compliance and regulatory liaison","responsibilities":["Determine applicable regimes, deadlines, recipients, privilege, confidentiality and approved submissions."]},{"name":"Independent reviewer and approval authority","responsibilities":["Review evidence, conflicts, classifications, causal claims, completeness and release decisions within mandate."]},{"name":"Records and disclosure steward","responsibilities":["Own access, minimization, public summaries, legal hold, retention, disposition and projection policy."]}],"masterSystems":[]},"relations":[{"target":"WM-AI-001 AI System","type":"references","note":"Represent the unfrozen parent and affected-system boundary without inheritance, composition, mutation, release or cascade authority."},{"target":"WM-ACT-019 Incident","type":"references","note":"Resolve the underlying general incident while preserving a separate reporting-case identity and lifecycle."},{"target":"Investigation, regulatory case, remediation, harm, vulnerability, evidence, audit and records models","type":"references","note":"Resolve authoritative findings, actions, decisions and evidence without absorbing their ownership."},{"target":"EU AI Act, OECD AI incident framework, NIST AI RMF and SP 800-61r3, FIRST CSIRT, ISO/IEC 42001, PROV-O and RFC 3339","type":"aligned","note":"Project version-pinned legal, reporting, risk, response, management, provenance and timestamp views with declared loss."},{"target":"WM-AI-001 AI System","type":"neighbor","note":"The unified parent signal and candidate reference identify affected-system context but grant no inheritance or ownership. The report binds source-qualified system, model and deployment versions without mutating their masters."},{"target":"WM-ACT-019 Incident","type":"neighbor","note":"The general incident master owns occurrence, operational state and response history. The report owns a versioned communication and submission case about that incident."},{"target":"Investigation, remediation and regulatory case","type":"neighbor","note":"Investigations own methods and findings, remediation work owns actions and verification, and authorities own their cases and decisions. The report stores non-owning summaries, submissions, receipts and exchanges."},{"target":"Security incident and personal-data breach","type":"neighbor","note":"Cybersecurity and privacy regimes may overlap an AI incident but use independent applicability, risk, notification and authority semantics."},{"target":"EU AI Act, OECD, NIST, FIRST, ISO, PROV and RFC profiles","type":"neighbor","note":"These legal, reporting, risk, incident-response, management, provenance and timestamp sources have distinct scopes. No mapping is assumed binding or lossless outside its profile."},{"target":"WM-AI-001","type":"parent"}],"interaction":{"identity":{"applicability":"required","items":["Authoritative master-system identifier for each report case, version, submission, assertion, decision or projection, qualified by issuer, namespace and record kind.","Governed globally resolvable report-case IRI.","Dimension UUID or ULID when neither preceding identifier exists."]},"properties":{"applicability":"not-applicable","items":[]},"recognition":{"applicability":"optional","items":["An incident report names an affected AI system, an event time, a harm or near miss, a reporter and a submission state.","Often confused with a security incident ticket, a data breach notification, a customer complaint or a bug report."]},"capabilities":{"applicability":"required","items":["Open an AI incident report case: Governed operation to open an ai incident report case without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Bind affected systems and responsible parties: Governed operation to bind affected systems and responsible parties without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Record source-qualified facts and timeline: Governed operation to record source-qualified facts and timeline without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Assess classification, impact and causality: Governed operation to assess classification, impact and causality without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Link security, privacy and investigation records: Governed operation to link security, privacy and investigation records without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Record response and remediation summaries: Governed operation to record response and remediation summaries without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Calculate a reporting obligation and deadline: Governed operation to calculate a reporting obligation and deadline without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Submit an initial, intermediate, final or corrected report: Governed operation to submit an initial, intermediate, final or corrected report without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Amend, supersede, close or reopen a report: Governed operation to amend, supersede, close or reopen a report without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure.","Disclose, project, retain and audit: Governed operation to disclose, project, retain and audit without autonomous legal classification, regulatory submission, public disclosure, liability admission, attribution, access expansion, evidence destruction or closure."]},"hazards":{"applicability":"required","items":["Missed legal reporting deadlines.","Leaks of personal or sensitive data through reports.","Premature causal claims that misdirect remediation."]},"interfaces":{"applicability":"required","items":["EU AI Act (Regulation (EU) 2024/1689) Article 73 serious incident reporting.","NIST AI Risk Management Framework 1.0.","ISO/IEC 42001 AI management systems.","OASIS STIX 2.1 for linked security incidents.","RFC 3339 timestamps.","W3C PROV-O."]},"context":{"applicability":"required","items":["Incident definitions, reportability, seriousness, causal threshold, deadlines, recipients, privilege, disclosure, privacy and retention depend on jurisdiction and sector.","The EU AI Act, GDPR and EDPB guidance are European Union profiles; NIST publications are voluntary United States guidance unless adopted.","OECD, FIRST, ISO, PROV and RFC sources are versioned profiles and are not assumed binding, lossless or universally applicable."]}},"sources":[{"title":"Regulation (EU) 2024/1689 Artificial Intelligence Act, consolidated text","url":"https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng","note":"European Union"},{"title":"Draft guidance and reporting template on serious AI incidents","url":"https://digital-strategy.ec.europa.eu/en/consultations/ai-act-commission-issues-draft-guidance-and-reporting-template-serious-ai-incidents-and-seeks","note":"European Commission"},{"title":"Defining AI incidents and related terms","url":"https://www.oecd.org/en/publications/defining-ai-incidents-and-related-terms_d1a8d965-en.html","note":"Organisation for Economic Co-operation and Development"},{"title":"Towards a common reporting framework for AI incidents","url":"https://www.oecd.org/en/publications/towards-a-common-reporting-framework-for-ai-incidents_f326d4ac-en.html","note":"Organisation for Economic Co-operation and Development"},{"title":"AI Incidents and Hazards Monitor","url":"https://oecd.ai/en/incidents/","note":"Organisation for Economic Co-operation and Development"},{"title":"Artificial Intelligence Risk Management Framework (AI RMF 1.0)","url":"https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10","note":"National Institute of Standards and Technology"},{"title":"Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile","url":"https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence","note":"National Institute of Standards and Technology"},{"title":"Incident Response Recommendations and Considerations for Cybersecurity Risk Management","url":"https://csrc.nist.gov/pubs/sp/800/61/r3/final","note":"National Institute of Standards and Technology"},{"title":"Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations","url":"https://www.nist.gov/publications/adversarial-machine-learning-taxonomy-and-terminology-attacks-and-mitigations-0","note":"National Institute of Standards and Technology"},{"title":"Regulation (EU) 2016/679 General Data Protection Regulation","url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","note":"European Union"},{"title":"Guidelines 9/2022 on personal data breach notification under GDPR","url":"https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-92022-personal-data-breach-notification-under_en","note":"European Data Protection Board"},{"title":"CSIRT Services Framework","url":"https://www.first.org/standards/frameworks/csirts/csirt_services_framework_v2.1","note":"Forum of Incident Response and Security Teams"},{"title":"ISO/IEC 42001 AI management systems","url":"https://www.iso.org/standard/42001","note":"International Organization for Standardization"},{"title":"PROV-O: The PROV Ontology","url":"https://www.w3.org/TR/prov-o/","note":"World Wide Web Consortium"},{"title":"Date and Time on the Internet: Timestamps","url":"https://www.rfc-editor.org/info/rfc3339/","note":"Internet Engineering Task Force"}],"openQuestions":["Approve or reject the WM-AI-001 and WM-ACT-019 relationships and register investigation, remediation, authority-case, harm, vulnerability, evidence and records edges.","Create jurisdiction, sector, AI-system-class, seriousness, causal-threshold, deadline, recipient and reporting-template profiles.","Refresh the EU Article 73 mapping when final guidance and templates replace the inspected draft package.","Validate organization-specific privilege, trade-secret, personal-data, security, disclosure, affected-person communication and retention policies.","Test version-pinned EU, OECD, NIST, FIRST, ISO, PROV and RFC mappings and obtain supplemental independent external review before canonical promotion.","Claude and Grok each timed out on one bounded attempt; no independent external result was admitted.","The unified parent WM-AI-001 and candidate references to WM-AI-001 and WM-ACT-019 are not approved frozen composition edges.","The European Commission Article 73 guidance and high-risk-system template inspected here remain draft.","Sector, jurisdiction, system-class and regulator-specific notification forms and deadlines require separate profiles."],"resources":{"spec":"/models/wm-ai-010-ai-incident-report/spec.yaml","agents":"/models/wm-ai-010-ai-incident-report/AGENTS.md","source":"https://github.com/ver-cy/world-models/tree/feat/mega-model-registry/publications/wm-ai-010-ai-incident-report"},"provenance":{"origin":"world-models research","builtFrom":["models/wm-ai-010-ai-incident-report/spec.yaml","ver-cy/world-models/card-supplements/wm-ai-010-ai-incident-report.json"],"providers":["Codex"],"researchStatus":"reviewable-draft","generatedAt":"2026-09-06T12:23:06Z","builder":"tools/build_cards.py@1.0.0"},"completeness":{"sections":{"classifiers":"filled","whatItIs":"filled","purpose":"filled","distinguishingFeatures":"filled","structure":"filled","agentConduct":"filled","ethics":"filled","owners":"filled","relations":"filled","interaction.identity":"filled","interaction.properties":"not-applicable","interaction.recognition":"filled","interaction.capabilities":"filled","interaction.hazards":"filled","interaction.interfaces":"filled","interaction.context":"filled","sources":"filled"},"notes":{"interaction.properties":"Institutional or informational subject: no invented physical properties.","_supplement":"Sections authored in card supplement 1.0.0 by Claude (Opus 5.5) (2026-10-05, unreviewed). Written from the published specification and established practice in the field; no new sources were read. Unreviewed."},"score":1.0}}