# Framework mappings

Public sources are mapped to technical evidence concepts without certification, readiness scoring, legal advice, or a compliance conclusion.

- Canonical: https://5d.langoni.me/evidence/framework-mappings/
- Evidence strength: Verified
- Evidence form: Framework mapping
- Version: 1.1.0
- Author: Loren Angoni; 5D product owner
- Created: 2026-09-27
- Updated: 2026-10-06
- Verified: 2026-10-06

## Scope

Public technical-evidence concepts mapped to the named primary framework sources.

## How to read the mapping

Direct implementation support means the cited technical mechanism can produce a named kind of evidence. Partial mapping means it can contribute but cannot discharge the wider obligation or objective.

Every mapping is bounded by the deployment, version, test conditions, evidence retention, and organisational controls around it.

## Claim register

### Mappings describe evidence contribution only

Evidence strength: Verified  
Evidence form: Framework mapping  
Evidence: eu-ai-act, uk-ai-principles, singapore-agentic-ai, nist-ai-rmf, owasp-agentic, iso-42001

The page identifies where runtime records, policy routing, review evidence, and testing can contribute to oversight concepts.

Limit: The mappings do not determine whether an organisation or AI system satisfies a framework.

## Limits

- A mapping is not certification, conformity assessment, readiness scoring, legal advice, or complete coverage.
- Organisational, legal, lifecycle, retention, and deployment responsibilities remain outside a runtime gate.
- NIST states that AI RMF 1.0 is under revision; this record maps the named 1.0 edition and must be re-reviewed when a successor is published.

## Sources

- [Regulation (EU) 2024/1689](https://eur-lex.europa.eu/eli/reg/2024/1689/oj); primary-authority; Official Journal text, 2024/1689; verified 2026-09-27
- [NIST AI Risk Management Framework 1.0](https://www.nist.gov/itl/ai-risk-management-framework); primary-authority; AI RMF 1.0; NIST revision underway as of 2026-09-27; verified 2026-09-27
- [Implementing the UK's AI regulatory principles](https://www.gov.uk/government/publications/implementing-the-uks-ai-regulatory-principles-initial-guidance-for-regulators/implementing-the-uks-ai-regulatory-principles-initial-guidance-for-regulators); primary-authority; Initial guidance for regulators, 6 February 2024; verified 2026-10-06
- [Singapore Model AI Governance Framework for Agentic AI](https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/factsheets/2026/updated-model-ai-governance-framework-for-agentic-ai); primary-authority; Updated framework, 20 May 2026; verified 2026-10-06
- [OWASP Top 10 for Agentic Applications 2026](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/); primary-authority; 2026 edition; verified 2026-09-27
- [ISO/IEC 42001 overview](https://www.iso.org/standard/42001); primary-authority; ISO/IEC 42001:2023 overview; verified 2026-09-27

---
Illustrative website evidence only. No certification, legal conclusion, production integration, or complete coverage is represented.