Your AI Decisions Need Evidence.
Here’s The Map.
Article-by-article regulatory alignment. Not compliance claims — evidence infrastructure mapping.
AAL provides evidence infrastructure. This is not legal advice or compliance certification.
The compliance window is closing.
Five regulatory events that define the next 12 months for AI governance.
May preempt state AI laws. OIA monitors and adapts.
$20,000 per violation per consumer. Affirmative defense requires “recognized risk management framework.”
Articles 9, 12, 13, 14 mandatory. Extraterritorial. Requires automatic logging + human oversight evidence.
4 carriers excluded AI liability (Jan 2026). Mobley v. Workday: $1.1B class action.
New framework validates agent-level accountability. Aligns with AAL architecture.
EU AI Act — Article-by-Article Mapping
How AAL’s settlement infrastructure maps to mandatory high-risk AI requirements.
“Establish, implement, document, and maintain a risk management system”
Settlement chain provides per-decision risk documentation
GET /v1/evidence/:chain_id returns complete decision trail “High-risk AI systems shall technically allow for the automatic recording of events”
Every AI decision auto-generates tamper-evident evidence packets
“Designed and developed in such a way to ensure their operation is sufficiently transparent”
Settlement receipt provides full decision transparency per query
“Designed and developed so they can be effectively overseen by natural persons”
Authorization Layer (L1) enforces human-in-the-loop policies
Colorado SB 24-205
The first US state AI law with teeth — and an affirmative defense path.
The Law
How Δ1 Maps
- ✓ Each AI decision → Evidence Pack (C1: evidence consumed, C2: intent isolated, C3: signed)
- ✓ Settlement receipt = documentary proof of “reasonable care”
- ✓ Binary: SETTLED = framework applied / UNSETTLED = gap identified
NIST AI RMF Alignment
How AAL maps to the four core functions of the NIST AI Risk Management Framework.
| NIST Function | AAL Capability | Layer |
|---|---|---|
| GOVERN | Policy-based authorization (Authorization Layer) | L1 |
| MAP | 5-level leakage taxonomy identifies risk surfaces | L0 |
| MEASURE | FLEET benchmark quantifies defense effectiveness | L3 |
| MANAGE | Settlement receipt provides closure + audit evidence | L0–L4 |
OWASP Agentic AI Top 10
Every risk category in the OWASP Agentic AI Top 10 mapped to an AAL layer.
Evidence Pack Format
The atomic unit of accountability. One per decision. Automatically generated.
Evidence Pack = Run ID + Closure Status + Verification Proof. Per decision. Automatically.
Evidence infrastructure for the regulations ahead.
See how settlement maps to your compliance stack. 15 minutes, zero commitment.
AAL provides evidence infrastructure aligned with regulatory requirements. This mapping does not constitute legal advice, compliance certification, or audit attestation. Compliance depends on your organizational controls and deployment context. 12 patents pending (354+ claims). 9 published papers with DOI.