{
  "$comment": "Generated by migration/generators/build-knowledge-graph.mjs. Every fact is read from a published record on this site; only the routes are authored. Do not edit by hand.",
  "version": "1.0",
  "origin": "https://nabeelkhan.com",
  "author": {
    "@id": "https://nabeelkhan.com/#nabeel",
    "name": "Nabeel Khan"
  },
  "evidence_types": {
    "author_position": "Nabeel Khan’s own published position: his frameworks (deposited specifications with concept DOIs, not peer reviewed), books, instruments and services.",
    "external_regulation": "An instrument a regulator issued, as this site has read it. Confirm against the regulator before relying on it."
  },
  "not_included": "General AI knowledge. Nothing in this graph is a statement about AI in general, and none of it is a regulator’s endorsement.",
  "counts": {
    "Person": 1,
    "Expertise": 9,
    "Registry": 1,
    "Framework": 12,
    "Book": 6,
    "Service": 4,
    "Instrument": 9,
    "Regulation": 2
  },
  "entities": [
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [
        {
          "kind": "same_as",
          "value": "https://orcid.org/0009-0005-5364-914X"
        },
        {
          "kind": "same_as",
          "value": "https://scholar.google.com/citations?user=Y4BrCq4AAAAJ"
        },
        {
          "kind": "same_as",
          "value": "https://www.amazon.com/stores/Dr.-Nabeel-A.-Khan/author/B0HDCSVR51"
        },
        {
          "kind": "same_as",
          "value": "https://www.linkedin.com/in/nabeelkhan"
        },
        {
          "kind": "same_as",
          "value": "https://x.com/TheNabeelKhan"
        },
        {
          "kind": "same_as",
          "value": "https://medium.com/@thenabeelkhan"
        },
        {
          "kind": "same_as",
          "value": "https://www.instagram.com/nabeelkhan"
        },
        {
          "kind": "same_as",
          "value": "https://www.facebook.com/nabeelkhan.consulting"
        },
        {
          "kind": "same_as",
          "value": "https://www.youtube.com/@NabeelKhan.consulting"
        },
        {
          "kind": "same_as",
          "value": "https://www.tiktok.com/@nabeelkhan.com"
        },
        {
          "kind": "same_as",
          "value": "https://github.com/DrNabeelKhan"
        },
        {
          "kind": "same_as",
          "value": "https://www.wikidata.org/wiki/Q140932324"
        },
        {
          "kind": "same_as",
          "value": "https://openlibrary.org/authors/OL16572900A"
        },
        {
          "kind": "same_as",
          "value": "https://www.goodreads.com/author/show/70708705"
        },
        {
          "kind": "same_as",
          "value": "https://www.crunchbase.com/person/nabeel-khan-220d"
        },
        {
          "kind": "same_as",
          "value": "https://www.google.com/maps?cid=17339841411162252869"
        }
      ],
      "id": "nabeel-khan",
      "type": "Person",
      "name": "Nabeel Khan",
      "description": "Nabeel Khan is a Kuwait-born Canadian enterprise AI architect and AI governance advisor working across Canada and the GCC, and the author of five books on governed production AI.",
      "canonical_url": "https://nabeelkhan.com/nabeel-khan",
      "alternate_names": [
        "Dr. Nabeel A. Khan",
        "Nabeel A. Khan",
        "Dr. N. Khan",
        "Nabeel K.",
        "Nabeel K"
      ],
      "job_titles": [
        "AI Strategy Consultant",
        "AI Governance Consultant",
        "Enterprise AI Architect",
        "AI Strategy Advisor",
        "Fractional Chief AI Officer",
        "Enterprise AI Architect & AI Governance Advisor"
      ],
      "last_updated": "2026-10-12"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "avrf",
        "e23-check",
        "e23-templates",
        "five-gate",
        "mesa",
        "mesa-check",
        "model-risk",
        "osfi-e-23",
        "readiness"
      ],
      "related_publications": [
        "ai-governance-playbook",
        "e23-handbook"
      ],
      "evidence": [],
      "id": "governed-production-ai",
      "type": "Expertise",
      "name": "Governed Production AI — the Discipline, Defined",
      "description": "The canonical definition of governed production AI: systems that are powerful and defensible at the same time. The discipline, the named frameworks behind it, and the evidence surfaces where it is practised.",
      "canonical_url": "https://nabeelkhan.com/governed-production-ai",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "llm-infrastructure",
        "pattern-language"
      ],
      "related_publications": [
        "devops-for-ai-native-platforms",
        "llm-systems-in-production"
      ],
      "evidence": [],
      "id": "enterprise-ai-architecture",
      "type": "Expertise",
      "name": "Enterprise AI Architecture for Regulated Institutions",
      "description": "How AI capability enters an estate that already has an operating model, a regulator, and a record it must produce. Architectures and evidence.",
      "canonical_url": "https://nabeelkhan.com/enterprise-ai-architecture",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "cross-border",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "mesa-check",
        "readiness",
        "sacf"
      ],
      "related_publications": [
        "ai-governance-briefing",
        "ai-governance-playbook"
      ],
      "evidence": [],
      "id": "ai-governance",
      "type": "Expertise",
      "name": "AI Governance Consulting for Regulated Enterprises",
      "description": "AI governance consulting for banks, insurers, healthcare and government. Independent assessment and model risk, scored against MESA and ISO 42001.",
      "canonical_url": "https://nabeelkhan.com/ai-governance-consulting",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "avrf",
        "e23-check",
        "e23-templates",
        "e23-vendor-assessment",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "mesa-check",
        "mesa-mrm",
        "osfi-e-23",
        "sr-26-2"
      ],
      "related_publications": [
        "e23-handbook"
      ],
      "evidence": [],
      "id": "model-risk",
      "type": "Expertise",
      "name": "AI Model Risk Management and Independent Validation",
      "description": "Model risk for AI and LLM systems: six-pillar MRM, a ten-dimension risk classification, independent validation, and readiness for OSFI E-23 and SR 26-2.",
      "canonical_url": "https://nabeelkhan.com/ai-governance/model-risk",
      "last_updated": "2026-10-11"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "agent-governance",
        "ai-evidence",
        "e23-review-questions",
        "para",
        "pattern-language",
        "pevg"
      ],
      "related_publications": [
        "prompt-systems-agent-orchestration"
      ],
      "evidence": [],
      "id": "agentic-ai",
      "type": "Expertise",
      "name": "Agentic AI Architecture for Regulated Enterprises",
      "description": "Architecture and governance for enterprise AI agents: capability contracts, the PEVG pattern, tiered human review, and an evidence trail that holds up.",
      "canonical_url": "https://nabeelkhan.com/agentic-ai",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "agentic-ai",
        "ai-evidence",
        "e23-review-questions",
        "para",
        "pattern-language",
        "pevg"
      ],
      "related_publications": [
        "prompt-systems-agent-orchestration"
      ],
      "evidence": [],
      "id": "agent-governance",
      "type": "Expertise",
      "name": "The Agent Governance Stack — Eleven Stages, Each With a Specification",
      "description": "The agent governance stack, stage by stage: identity, purpose, authority, capability, policy, memory, evidence, action, verification, escalation, audit. Each one mapped to a published specification rather than a principle.",
      "canonical_url": "https://nabeelkhan.com/agent-governance",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "enterprise-ai-architecture",
        "pattern-language"
      ],
      "related_publications": [
        "devops-for-ai-native-platforms",
        "llm-systems-in-production"
      ],
      "evidence": [],
      "id": "llm-infrastructure",
      "type": "Expertise",
      "name": "LLM Systems: Architecture for Production Language Models",
      "description": "What separates an LLM demo from an LLM system: routing, retrieval as a governance surface, evaluation, observability, and cost that does not surprise.",
      "canonical_url": "https://nabeelkhan.com/llm-systems",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "agent-governance",
        "agentic-ai",
        "e23-review-questions",
        "para",
        "pattern-language",
        "pevg"
      ],
      "related_publications": [
        "prompt-systems-agent-orchestration"
      ],
      "evidence": [],
      "id": "ai-evidence",
      "type": "Expertise",
      "name": "Explainability Is for You. Evidence Is for the Regulator.",
      "description": "Evidence by Design: why explainability and evidence are different artifacts, and what a defensible AI decision record has to capture as it runs.",
      "canonical_url": "https://nabeelkhan.com/evidence-by-design",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "concylium"
      ],
      "related_publications": [],
      "evidence": [],
      "id": "machine-accessible-expertise",
      "type": "Expertise",
      "name": "Machine-Accessible AI Expertise — Defined and Demonstrated",
      "description": "Machine-accessible AI expertise: converting expert judgment, methodology and regulatory knowledge into governed interfaces that humans and AI systems can query, evaluate, apply and audit. Defined here, demonstrated by the site around it.",
      "canonical_url": "https://nabeelkhan.com/machine-accessible-ai-expertise",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22170112"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141232135"
        }
      ],
      "id": "registry",
      "type": "Registry",
      "family": null,
      "name": "The Defensible AI Framework Registry",
      "description": "Nine framework entries with canonical names, positions, evidence requirements, accountable roles, limitations and falsification conditions, plus a machine-readable representation and its schema.",
      "canonical_url": "https://nabeelkhan.com/frameworks/registry",
      "mark": null,
      "altitude": null,
      "specification": {
        "title": "The Defensible AI Framework Registry: Canonical Names, Definitions and Relationships for the Governed Production AI Discipline",
        "concept_doi": "https://doi.org/10.5281/zenodo.22170112",
        "version": "2.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22170112",
        "licence": "CC BY 4.0",
        "deposited": "2026-08-30",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "avrf",
        "cross-border",
        "e23-check",
        "e23-templates",
        "five-gate",
        "governed-production-ai",
        "mesa-check",
        "mesa-mrm",
        "model-risk",
        "osfi-e-23",
        "readiness",
        "sacf",
        "sr-26-2"
      ],
      "related_publications": [
        "ai-governance-briefing",
        "ai-governance-playbook",
        "e23-handbook"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22109836"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141182149"
        }
      ],
      "id": "mesa",
      "type": "Framework",
      "family": "governance",
      "name": "MESA Framework",
      "description": "Decomposes institutional AI governance into four altitudes, each carrying a definition, inputs and outputs, one accountable role and an evidence requirement an auditor can test. The altitudes are the Regulatory Floor, the Strategic Compass, Operational Machinery and the Technical Substrate. Five mechanisms operate it: layer separation, the cross-layer cascade, the enforcement constraint, mandatory interface couplings, and the evidence-based maturity vector.",
      "canonical_url": "https://nabeelkhan.com/frameworks/mesa",
      "mark": "trademark",
      "altitude": null,
      "specification": {
        "title": "The MESA Framework: A Four-Altitude Diagnostic Model for Institutional AI Governance",
        "concept_doi": "https://doi.org/10.5281/zenodo.22109836",
        "version": "1.1",
        "version_doi": "https://doi.org/10.5281/zenodo.22109836",
        "licence": "CC BY 4.0",
        "deposited": "2026-08-26",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "avrf",
        "e23-check",
        "e23-templates",
        "governed-production-ai",
        "mesa",
        "mesa-check",
        "model-risk",
        "osfi-e-23",
        "readiness"
      ],
      "related_publications": [
        "ai-governance-playbook",
        "e23-handbook"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22170122"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141232138"
        }
      ],
      "id": "five-gate",
      "type": "Framework",
      "family": "governance",
      "name": "Five-Gate Deployment Model",
      "description": "The lifecycle spine. No AI system reaches production, or remains there, except by passing five gates in order, each carrying entry criteria supplied by another framework, one accountable owner and a required evidence record. Rollback reverses G5 to G4 with evidence preserved; loop-back reopens G2 when an incident occurs at G5.",
      "canonical_url": "https://nabeelkhan.com/frameworks/five-gate",
      "mark": "trademark",
      "altitude": "Operational Machinery",
      "specification": {
        "title": "The Five-Gate Deployment Model: A Deployment Discipline for AI Systems",
        "concept_doi": "https://doi.org/10.5281/zenodo.22170122",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22170122",
        "licence": "CC BY 4.0",
        "deposited": "2026-08-30",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "cross-border",
        "mesa",
        "mesa-check"
      ],
      "related_publications": [
        "ai-governance-briefing",
        "ai-governance-playbook"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22170143"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141232144"
        }
      ],
      "id": "sacf",
      "type": "Framework",
      "family": "governance",
      "name": "Sharia AI Compliance Framework (SACF)",
      "description": "Binds a second, religiously authoritative approval power into AI lifecycle governance without splitting the institution into two governance systems. The Sharia Supervisory Board is treated as an authority source at the MESA Regulatory Floor, so its determinations cascade through the same machinery as civil regulation. Beneath that sit a Maqasid risk frame and three threads into Operational Machinery: dual validation, the Halal data certification chain, and vendor screening. Escalation is concurrent rather than sequential.",
      "canonical_url": "https://nabeelkhan.com/frameworks/sacf",
      "mark": "trademark",
      "altitude": "Regulatory Floor",
      "specification": {
        "title": "The Sharia AI Compliance Framework: A Dual-Authority Governance Architecture for Islamic Finance",
        "concept_doi": "https://doi.org/10.5281/zenodo.22170143",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22170143",
        "licence": "CC BY 4.0",
        "deposited": "2026-08-30",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "e23-check",
        "e23-templates",
        "e23-vendor-assessment",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "model-risk",
        "osfi-e-23"
      ],
      "related_publications": [
        "e23-handbook"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22170146"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141232147"
        }
      ],
      "id": "avrf",
      "type": "Framework",
      "family": "governance",
      "name": "AI Vendor Risk Framework (AVRF)",
      "description": "Governance of AI risk entering the institution through a third party, in five stages: classify, diligence, contract, monitor and exit. Vendor criticality is set by business criticality, data exposure and the autonomy the vendor's AI holds over institutional decisions together. Carries a Sharia vendor screening branch where REG-08 applies.",
      "canonical_url": "https://nabeelkhan.com/frameworks/avrf",
      "mark": "trademark",
      "altitude": "Operational Machinery",
      "specification": {
        "title": "The AI Vendor Due-Diligence Questionnaire: AVRF Instrument for Third-Party AI Systems, Models and APIs",
        "concept_doi": "https://doi.org/10.5281/zenodo.22170146",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22170146",
        "licence": "CC BY 4.0",
        "deposited": "2026-08-30",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22285057"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141476727"
        }
      ],
      "id": "airp",
      "type": "Framework",
      "family": "governance",
      "name": "AI Incident Response Protocol (AIRP)",
      "description": "What an institution does when an AI system fails, in six stages: signal, classify, contain, escalate, reconstruct and close. Its hardest requirement is that an incident is explainable only if the evidence needed to reconstruct it existed at the moment of the decision, bound to the policy version then in force.",
      "canonical_url": "https://nabeelkhan.com/frameworks/airp",
      "mark": "trademark",
      "altitude": "Operational Machinery",
      "specification": {
        "title": "The AI Incident Response Protocol: Six Stages, and the Evidence a Reconstruction Requires",
        "concept_doi": "https://doi.org/10.5281/zenodo.22285057",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22285057",
        "licence": "CC BY 4.0",
        "deposited": "2026-09-06",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22285052"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141476728"
        }
      ],
      "id": "cadre",
      "type": "Framework",
      "family": "governance",
      "name": "CADRE",
      "description": "How the governance function itself exists, in three parts formerly asserted as three frameworks. Structure: the governance office, its roles, staffing and reporting lines within the three-lines model. Decision rights: who is accountable, responsible, consulted and informed per lifecycle phase and decision type, with exactly one accountable person per decision. Cadence: weekly operations review, monthly risk review, quarterly board report, annual charter refresh, and the escalation paths. Includes a ninety-day stand-up path. The deposited specification states the same three parts as five artifacts an auditor can test, Charter, Authority, Decision rights, Records and Escalation, which are what the three parts produce and are not a restatement of them.",
      "canonical_url": "https://nabeelkhan.com/frameworks/cadre",
      "mark": "trademark",
      "altitude": "Strategic Compass",
      "specification": {
        "title": "CADRE: Charter, Authority, Decision Rights, Records, Escalation. The Governance Function Specified as Five Artifacts",
        "concept_doi": "https://doi.org/10.5281/zenodo.22285052",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22285052",
        "licence": "CC BY 4.0",
        "deposited": "2026-09-08",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22285047"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141476729"
        }
      ],
      "id": "ai-data-governance",
      "type": "Framework",
      "family": "governance",
      "name": "AI Data Governance Framework",
      "description": "The control system for the data boundary, in five stages: classify, bound, prove, gate and release. Fixes what data may exist inside an AI system, where it may reside, how its lineage is proven, what quality and minimization gates it passes, and what certification it carries. The residency rule set it produces is specified once here and consumed by REG-09, and is published as a JSON Schema with the deposited specification. Includes the Halal data certification chain for institutions under Sharia authority.",
      "canonical_url": "https://nabeelkhan.com/frameworks/ai-data-governance",
      "mark": "trademark",
      "altitude": "Technical Substrate",
      "specification": {
        "title": "The AI Data Governance Framework: A Five-Stage Control System for the Data Boundary in AI Systems",
        "concept_doi": "https://doi.org/10.5281/zenodo.22285047",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22285047",
        "licence": "CC BY 4.0",
        "deposited": "2026-09-14",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "mesa",
        "mesa-check",
        "sacf"
      ],
      "related_publications": [
        "ai-governance-briefing",
        "ai-governance-playbook"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22285049"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141476730"
        }
      ],
      "id": "cross-border",
      "type": "Framework",
      "family": "governance",
      "name": "Cross-Border AI Architecture Patterns",
      "description": "Three architectures for operating AI under the residency rules of more than one jurisdiction, selected by a deterministic instrument that takes the residency rule set of REG-03 unamended, groups workloads into classes by clause set, and resolves each class in a fixed order to one pattern, a blocking state, or an out-of-scope record. The patterns are Sovereign Silo, Federated and Regional Hub. Hybrid is NOT a fourth pattern and MUST NOT be selected for a workload class: it is the composition reported across an estate whose classes resolve to more than one of the three. Version 1.0 of this registry recorded four architectures, and the deposited specification governs the count under 11.3.",
      "canonical_url": "https://nabeelkhan.com/frameworks/cross-border",
      "mark": "trademark",
      "altitude": null,
      "specification": {
        "title": "Cross-Border AI Architecture Patterns: Three Patterns, and Why the Fourth Is Not a Choice",
        "concept_doi": "https://doi.org/10.5281/zenodo.22285049",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22285049",
        "licence": "CC BY 4.0",
        "deposited": "2026-09-15",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "mesa",
        "mesa-check",
        "model-risk",
        "sr-26-2"
      ],
      "related_publications": [
        "e23-handbook"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22285045"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141476731"
        }
      ],
      "id": "mesa-mrm",
      "type": "Framework",
      "family": "governance",
      "name": "MESA MRM Framework",
      "description": "Model risk management as an institutional discipline in six steps: inventory, pre-validation, independent validation, approval, monitoring and revalidation. Rests on the principle that a validation is not a property of the model but a bounded permission, held by the institution, over a stated use, for a stated period. The shorter form carried at version 1.0 of this registry, that validation confers the right to be believed, states the same principle for a reader rather than for a test, and the operative form above is the one an artifact can be tested against. Carries a dual-validation branch at step three where a Sharia Supervisory Board holds binding approval power.",
      "canonical_url": "https://nabeelkhan.com/frameworks/mesa-mrm",
      "mark": "trademark",
      "altitude": "Operational Machinery",
      "specification": {
        "title": "The MESA MRM Framework: A Six-Step Model Risk Management Discipline for AI Systems",
        "concept_doi": "https://doi.org/10.5281/zenodo.22285045",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22285045",
        "licence": "CC BY 4.0",
        "deposited": "2026-09-15",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "agent-governance",
        "agentic-ai",
        "ai-evidence",
        "e23-review-questions",
        "enterprise-ai-architecture",
        "llm-infrastructure",
        "para",
        "pevg"
      ],
      "related_publications": [
        "devops-for-ai-native-platforms",
        "llm-systems-in-production",
        "prompt-systems-agent-orchestration"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22109864"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141182150"
        }
      ],
      "id": "pattern-language",
      "type": "Framework",
      "family": "engineering",
      "name": "A Pattern Language for Production LLM Platforms",
      "description": "Seventeen patterns in three layers, unified by the Boundary Invariant: a boundary is a clause the optimizer may not cross, and everything else is optimization.",
      "canonical_url": "https://nabeelkhan.com/frameworks/pattern-language",
      "mark": null,
      "altitude": null,
      "specification": {
        "title": "A Pattern Language for Production LLM Platforms: Governed Routing, Agent Orchestration, and AI-Native Delivery",
        "concept_doi": "https://doi.org/10.5281/zenodo.22109864",
        "version": "1.1",
        "version_doi": "https://doi.org/10.5281/zenodo.22109864",
        "licence": "CC BY 4.0",
        "deposited": "2026-08-26",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-19"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "agent-governance",
        "agentic-ai",
        "ai-evidence",
        "e23-review-questions",
        "para",
        "pattern-language"
      ],
      "related_publications": [
        "prompt-systems-agent-orchestration"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22170132"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141232140"
        }
      ],
      "id": "pevg",
      "type": "Framework",
      "family": "engineering",
      "name": "PEVG",
      "description": "A planner that decomposes, an executor under least privilege, a verifier that decides what may be believed, a generator bound to what was verified.",
      "canonical_url": "https://nabeelkhan.com/frameworks/pevg",
      "mark": null,
      "altitude": null,
      "specification": {
        "title": "PEVG: Planner, Executor, Verifier, Generator. Four Contracts, and the Two Boundaries a Verifier Does Not Both Hold",
        "concept_doi": "https://doi.org/10.5281/zenodo.22170132",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22170132",
        "licence": "CC BY 4.0",
        "deposited": "2026-08-30",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "agent-governance",
        "agentic-ai",
        "ai-evidence",
        "e23-review-questions",
        "pattern-language",
        "pevg"
      ],
      "related_publications": [
        "prompt-systems-agent-orchestration"
      ],
      "evidence": [
        {
          "kind": "doi",
          "value": "https://doi.org/10.5281/zenodo.22170139"
        },
        {
          "kind": "wikidata",
          "value": "https://www.wikidata.org/wiki/Q141232142"
        }
      ],
      "id": "para",
      "type": "Framework",
      "family": "engineering",
      "name": "PARA",
      "description": "Four governed roles for operational AI agents: read the system, read knowledge, write the system, write knowledge. The operating loop made governable.",
      "canonical_url": "https://nabeelkhan.com/frameworks/para",
      "mark": null,
      "altitude": null,
      "specification": {
        "title": "PARA: Perception, Action, Reasoning, Adaptation. Four Faculties, Four Authority Types, and the Registry Entry That Turns a Faculty into a Contract",
        "concept_doi": "https://doi.org/10.5281/zenodo.22170139",
        "version": "1.0",
        "version_doi": "https://doi.org/10.5281/zenodo.22170139",
        "licence": "CC BY 4.0",
        "deposited": "2026-08-30",
        "peer_reviewed": false
      },
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "cross-border",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "mesa-check",
        "readiness",
        "sacf"
      ],
      "related_publications": [
        "ai-governance-briefing"
      ],
      "evidence": [
        {
          "kind": "isbn",
          "value": "978-1-0678317-0-7"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678960-1-0"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678960-2-7"
        }
      ],
      "id": "ai-governance-playbook",
      "type": "Book",
      "name": "AI Governance and Compliance Frameworks for the Middle East",
      "description": "The first complete operating manual for governing AI inside Middle East financial institutions: SAMA, CBUAE, SDAIA, DIFC, QCB and Sharia governance.",
      "canonical_url": "https://nabeelkhan.com/ai-governance",
      "date_published": "2026-06-08",
      "status": "published",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "cross-border",
        "mesa",
        "mesa-check",
        "sacf"
      ],
      "related_publications": [
        "ai-governance-playbook"
      ],
      "evidence": [
        {
          "kind": "isbn",
          "value": "978-1-0678960-3-4"
        }
      ],
      "id": "ai-governance-briefing",
      "type": "Book",
      "name": "AI Governance for the Middle East: The Executive Briefing",
      "description": "The first complete operating manual for governing AI inside Middle East financial institutions: SAMA, CBUAE, SDAIA, DIFC, QCB and Sharia governance.",
      "canonical_url": "https://nabeelkhan.com/ai-governance",
      "date_published": "2026-06-09",
      "status": "published",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "avrf",
        "e23-check",
        "e23-templates",
        "e23-vendor-assessment",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "mesa-check",
        "mesa-mrm",
        "model-risk",
        "osfi-e-23",
        "sr-26-2"
      ],
      "related_publications": [],
      "evidence": [
        {
          "kind": "isbn",
          "value": "978-1-0678960-4-1"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678960-5-8"
        }
      ],
      "id": "e23-handbook",
      "type": "Book",
      "name": "OSFI E-23 for AI Systems",
      "description": "OSFI E-23 for AI Systems, a practitioner’s handbook for Canadian financial institutions: accountable gates, enforceable controls and reconstructable evidence. Forthcoming 5 November 2026.",
      "canonical_url": "https://nabeelkhan.com/osfi-e-23-for-ai-systems",
      "date_published": "2026-11-05",
      "status": "forthcoming, 2026-11-05",
      "last_updated": "2026-10-12"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "enterprise-ai-architecture",
        "llm-infrastructure",
        "pattern-language"
      ],
      "related_publications": [
        "devops-for-ai-native-platforms"
      ],
      "evidence": [
        {
          "kind": "isbn",
          "value": "978-1-0678317-1-4"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678317-5-2"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678317-8-3"
        }
      ],
      "id": "llm-systems-in-production",
      "type": "Book",
      "name": "LLM Systems in Production",
      "description": "The routing and observability gateway for regulated LLM systems: which model may answer, at what latency, cost and risk. Book 1, out 24 August 2026.",
      "canonical_url": "https://nabeelkhan.com/llm-systems-in-production",
      "date_published": "2026-08-24",
      "status": "published",
      "last_updated": "2026-10-08"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "agent-governance",
        "agentic-ai",
        "ai-evidence",
        "e23-review-questions",
        "para",
        "pattern-language",
        "pevg"
      ],
      "related_publications": [],
      "evidence": [
        {
          "kind": "isbn",
          "value": "978-1-0678317-2-1"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678317-6-9"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678317-9-0"
        }
      ],
      "id": "prompt-systems-agent-orchestration",
      "type": "Book",
      "name": "Prompt Systems and Agent Orchestration",
      "description": "Turn a pile of prompts into governed agents that plan, act, verify and submit to human review. Book 2, out 5 September 2026.",
      "canonical_url": "https://nabeelkhan.com/prompt-systems-agent-orchestration",
      "date_published": "2026-09-05",
      "status": "published",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "enterprise-ai-architecture",
        "llm-infrastructure",
        "pattern-language"
      ],
      "related_publications": [
        "llm-systems-in-production"
      ],
      "evidence": [
        {
          "kind": "isbn",
          "value": "978-1-0678317-3-8"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678317-7-6"
        },
        {
          "kind": "isbn",
          "value": "978-1-0678960-0-3"
        }
      ],
      "id": "devops-for-ai-native-platforms",
      "type": "Book",
      "name": "DevOps for AI-Native Platforms",
      "description": "The internal developer platform that builds, ships and governs AI: golden paths, policy-as-code guardrails, trust tiers, PARA. Book 3, 15 September.",
      "canonical_url": "https://nabeelkhan.com/devops-for-ai-native-platforms",
      "date_published": "2026-09-15",
      "status": "published",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [],
      "id": "teardown",
      "type": "Service",
      "name": "The AI Governance Teardown",
      "description": "A fixed-scope, two-week examination of how a regulated organization governs its AI, scored against MESA. Find the gap before the regulator does.",
      "canonical_url": "https://nabeelkhan.com/teardown",
      "terms": "Fixed fees are disclosed on the free Fit Call and are not published; nothing here quotes a price, agrees a scope or certifies compliance.",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [],
      "id": "e23-readiness-review",
      "type": "Service",
      "name": "E-23 Readiness Review: A Dated Gap Plan to 1 May 2027",
      "description": "A three-week, fixed-fee review of how a Canadian financial institution governs its AI models against OSFI Guideline E-23, ending in a dated gap plan with an owner per gap.",
      "canonical_url": "https://nabeelkhan.com/e-23/readiness-review",
      "terms": "Fixed fees are disclosed on the free Fit Call and are not published; nothing here quotes a price, agrees a scope or certifies compliance.",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [],
      "id": "engagements",
      "type": "Service",
      "name": "AI Consulting Engagements",
      "description": "Fixed-scope and retainer engagements for regulated AI: the AI Governance Teardown, a Regulated AI Architecture Sprint, an Advisory Retainer and the E-23 Readiness Review.",
      "canonical_url": "https://nabeelkhan.com/engagements",
      "terms": "Fixed fees are disclosed on the free Fit Call and are not published; nothing here quotes a price, agrees a scope or certifies compliance.",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [],
      "id": "fit-call",
      "type": "Service",
      "name": "Contact Nabeel Khan — Book an AI Governance Fit Call",
      "description": "Book a free 30-minute fit call with Nabeel Khan on AI governance and LLM production readiness, for regulated AI teams across North America and the GCC.",
      "canonical_url": "https://nabeelkhan.com/contact",
      "terms": "Fixed fees are disclosed on the free Fit Call and are not published; nothing here quotes a price, agrees a scope or certifies compliance.",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "mesa-check"
      ],
      "related_publications": [
        "ai-governance-playbook"
      ],
      "evidence": [],
      "id": "readiness",
      "type": "Instrument",
      "name": "AI Governance Readiness: Two Routes, One Front Door",
      "description": "Two readiness routes for AI governance. E-23 Readiness for Canadian federally regulated financial institutions, and AI Governance Readiness for any jurisdiction. Free checks first.",
      "canonical_url": "https://nabeelkhan.com/readiness",
      "last_updated": "2026-10-12"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "avrf",
        "e23-templates",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "model-risk",
        "osfi-e-23"
      ],
      "related_publications": [
        "e23-handbook"
      ],
      "evidence": [],
      "id": "e23-check",
      "type": "Instrument",
      "name": "E-23 Readiness Check: Twelve Questions, Six Themes",
      "description": "A free OSFI E-23 readiness check for AI systems: twelve questions across six themes, scored in your browser, with the weakest theme named and the template that addresses it.",
      "canonical_url": "https://nabeelkhan.com/e-23/readiness",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "ai-governance",
        "cross-border",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "mesa-mrm",
        "model-risk",
        "readiness",
        "sacf",
        "sr-26-2"
      ],
      "related_publications": [
        "ai-governance-briefing",
        "ai-governance-playbook",
        "e23-handbook"
      ],
      "evidence": [],
      "id": "mesa-check",
      "type": "Instrument",
      "name": "Free AI Governance Readiness Assessment — MESA Scored",
      "description": "A free AI governance readiness assessment. Twelve questions across the four MESA layers, scored in your browser. No sign-up, no email, and your answers are never sent.",
      "canonical_url": "https://nabeelkhan.com/ai-governance-readiness-assessment",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [],
      "id": "mesa-self-assessment",
      "type": "Instrument",
      "name": "The 50-Question MESA Self-Assessment — AI Governance Maturity",
      "description": "The fifty-question MESA Self-Assessment from the Enterprise Playbook, scored in your browser across four layers. Your answers are never transmitted; no sign-up.",
      "canonical_url": "https://nabeelkhan.com/ai-governance/self-assessment",
      "last_updated": "2026-10-09"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "avrf",
        "e23-check",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "model-risk",
        "osfi-e-23"
      ],
      "related_publications": [
        "e23-handbook"
      ],
      "evidence": [],
      "id": "e23-templates",
      "type": "Instrument",
      "name": "OSFI E-23 for AI Systems: Templates, Readiness Check and the Book",
      "description": "The companion to the handbook OSFI E-23 for AI Systems: the seven templates it prints, a free E-23 readiness check, and the route from the check to a dated gap plan.",
      "canonical_url": "https://nabeelkhan.com/e-23",
      "last_updated": "2026-10-12"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "avrf",
        "model-risk"
      ],
      "related_publications": [
        "e23-handbook"
      ],
      "evidence": [],
      "id": "e23-vendor-assessment",
      "type": "Instrument",
      "name": "AVRF questionnaire, scoring sheet and the Pellbrook worked example: E-23 Template, Chapter 9",
      "description": "The AVRF questionnaire, scoring sheet and the Pellbrook worked example, from Chapter 9 of OSFI E-23 for AI Systems. Every field shown on the page; the Word and Excel file free with a work email.",
      "canonical_url": "https://nabeelkhan.com/e-23/vendor-assessment",
      "last_updated": "2026-10-18"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "agent-governance",
        "agentic-ai",
        "ai-evidence",
        "para",
        "pattern-language",
        "pevg"
      ],
      "related_publications": [
        "prompt-systems-agent-orchestration"
      ],
      "evidence": [],
      "id": "e23-review-questions",
      "type": "Instrument",
      "name": "PEVG and PARA review question set: E-23 Template, Chapter 7",
      "description": "The PEVG and PARA review question set, from Chapter 7 of OSFI E-23 for AI Systems. Every field shown on the page; the Word file free with a work email.",
      "canonical_url": "https://nabeelkhan.com/e-23/review-questions",
      "last_updated": "2026-10-18"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [],
      "related_publications": [],
      "evidence": [],
      "id": "ai-governance-templates",
      "type": "Instrument",
      "name": "AI Governance Templates and Tools — Appendix B",
      "description": "39 institutional AI governance artifacts from the Enterprise Playbook: committee charters, model cards, validation reports, DPIAs and vendor clauses.",
      "canonical_url": "https://nabeelkhan.com/ai-governance/templates",
      "last_updated": "2026-10-11"
    },
    {
      "author": "Nabeel Khan",
      "evidence_type": "author_position",
      "related_concepts": [
        "machine-accessible-expertise"
      ],
      "related_publications": [],
      "evidence": [],
      "id": "concylium",
      "type": "Instrument",
      "name": "Concylium — 13 callable AI governance tools over MCP",
      "description": "Connect any MCP client to Concylium and ask what actually binds AI systems in Canada and the GCC. 13 tools, 11 that read the published corpus and 2 that can book a call or send a message, no key, every answer carrying the source it came from.",
      "canonical_url": "https://nabeelkhan.com/concylium",
      "last_updated": "2026-10-11"
    },
    {
      "id": "osfi-e-23",
      "type": "Regulation",
      "name": "OSFI Guideline E-23, Model Risk Management (2027)",
      "author": "Office of the Superintendent of Financial Institutions (OSFI)",
      "evidence_type": "external_regulation",
      "jurisdiction": "Canada",
      "status": "Published 11 September 2025; effective 1 May 2027",
      "description": "Applies to all federally regulated financial institutions in Canada. Its definition of a model names artificial intelligence and machine learning methods.",
      "canonical_url": "https://www.osfi-bsif.gc.ca/en/guidance/guidance-library/guideline-e-23-model-risk-management-2027",
      "read_on": [
        "https://nabeelkhan.com/osfi-e-23-ai-readiness",
        "https://nabeelkhan.com/ai-governance/canada",
        "https://nabeelkhan.com/e-23"
      ],
      "related_concepts": [
        "avrf",
        "e23-check",
        "e23-templates",
        "five-gate",
        "governed-production-ai",
        "mesa",
        "model-risk"
      ],
      "related_publications": [
        "e23-handbook"
      ],
      "evidence": [
        {
          "kind": "source",
          "value": "https://www.osfi-bsif.gc.ca/en/guidance/guidance-library/guideline-e-23-model-risk-management-2027"
        }
      ],
      "last_updated": "2026-10-19"
    },
    {
      "id": "sr-26-2",
      "type": "Regulation",
      "name": "SR 26-2, model risk management guidance",
      "author": "Federal Reserve, OCC and FDIC",
      "evidence_type": "external_regulation",
      "jurisdiction": "United States",
      "status": "Issued 17 April 2026; superseded SR 11-7 and SR 21-8",
      "description": "Risk-based model risk guidance expected to be most relevant to banking organizations above roughly thirty billion dollars in assets. Its footnote 3 places generative and agentic AI outside its scope.",
      "canonical_url": null,
      "read_on": [
        "https://nabeelkhan.com/ai-governance/model-risk",
        "https://nabeelkhan.com/ai-governance/regulatory-tables"
      ],
      "related_concepts": [
        "mesa",
        "mesa-check",
        "mesa-mrm",
        "model-risk"
      ],
      "related_publications": [
        "e23-handbook"
      ],
      "evidence": [],
      "last_updated": "2026-10-11"
    }
  ],
  "routes": [
    {
      "id": "ai-in-production-accountable",
      "problem": "AI is in production at a regulated organisation and someone now has to answer for it.",
      "signals": [
        "model risk",
        "audit",
        "board",
        "regulator",
        "governance",
        "accountab",
        "in production",
        "ai policy",
        "incident",
        "evidence"
      ],
      "expertise": [
        "governed-production-ai",
        "ai-governance"
      ],
      "frameworks": [
        "mesa",
        "five-gate"
      ],
      "regulation": [],
      "publications": [
        "ai-governance-playbook"
      ],
      "instruments": [
        "readiness",
        "mesa-check"
      ],
      "action": "teardown",
      "human": "fit-call",
      "chain": "expertise -> framework -> regulation -> publication -> instrument -> action -> human"
    },
    {
      "id": "canada-e23",
      "problem": "A Canadian bank, insurer or trust company is preparing for OSFI Guideline E-23.",
      "signals": [
        "e-23",
        "e23",
        "osfi",
        "1 may 2027",
        "canadian bank",
        "canada",
        "frfi",
        "model inventory"
      ],
      "jurisdictions": [
        "canada",
        "canadian"
      ],
      "expertise": [
        "model-risk",
        "governed-production-ai"
      ],
      "frameworks": [
        "five-gate",
        "mesa",
        "avrf"
      ],
      "regulation": [
        "osfi-e-23"
      ],
      "publications": [
        "e23-handbook"
      ],
      "instruments": [
        "e23-check",
        "e23-templates"
      ],
      "action": "e23-readiness-review",
      "human": "fit-call",
      "chain": "expertise -> framework -> regulation -> publication -> instrument -> action -> human"
    },
    {
      "id": "us-model-risk",
      "problem": "A US bank or insurer is governing AI models under SR 26-2 or the NAIC bulletin.",
      "signals": [
        "sr 26-2",
        "sr 11-7",
        "naic",
        "occ",
        "federal reserve",
        "us bank",
        "united states"
      ],
      "jurisdictions": [
        "united states",
        "usa",
        "u.s.",
        "us"
      ],
      "expertise": [
        "model-risk"
      ],
      "frameworks": [
        "mesa-mrm",
        "mesa"
      ],
      "regulation": [
        "sr-26-2"
      ],
      "publications": [
        "e23-handbook"
      ],
      "instruments": [
        "mesa-check"
      ],
      "action": "teardown",
      "human": "fit-call",
      "chain": "expertise -> framework -> regulation -> publication -> instrument -> action -> human"
    },
    {
      "id": "gcc-islamic-finance",
      "problem": "A bank, Islamic financial institution or government entity in the GCC needs AI governance, including Sharia governance.",
      "signals": [
        "sama",
        "cbuae",
        "qcb",
        "saudi",
        "uae",
        "qatar",
        "kuwait",
        "bahrain",
        "oman",
        "gcc",
        "sharia",
        "shariah",
        "islamic"
      ],
      "jurisdictions": [
        "saudi",
        "uae",
        "emirates",
        "qatar",
        "kuwait",
        "bahrain",
        "oman",
        "gcc"
      ],
      "expertise": [
        "ai-governance"
      ],
      "frameworks": [
        "sacf",
        "mesa",
        "cross-border"
      ],
      "regulation": [],
      "publications": [
        "ai-governance-playbook",
        "ai-governance-briefing"
      ],
      "instruments": [
        "mesa-check"
      ],
      "action": "teardown",
      "human": "fit-call",
      "chain": "expertise -> framework -> regulation -> publication -> instrument -> action -> human"
    },
    {
      "id": "vendor-ai",
      "problem": "An organisation is buying or renewing an AI model from a vendor.",
      "signals": [
        "vendor",
        "third-party",
        "third party",
        "procurement",
        "supplier",
        "api model",
        "bought"
      ],
      "expertise": [
        "model-risk"
      ],
      "frameworks": [
        "avrf"
      ],
      "regulation": [],
      "publications": [
        "e23-handbook"
      ],
      "instruments": [
        "e23-vendor-assessment"
      ],
      "action": "teardown",
      "human": "fit-call",
      "chain": "expertise -> framework -> regulation -> publication -> instrument -> action -> human"
    },
    {
      "id": "agents-authority-evidence",
      "problem": "AI agents are acting on systems and need bounded authority, verification and evidence.",
      "signals": [
        "agent",
        "agentic",
        "autonomous",
        "tool use",
        "mcp",
        "langgraph",
        "orchestration",
        "human in the loop"
      ],
      "expertise": [
        "agentic-ai",
        "agent-governance",
        "ai-evidence"
      ],
      "frameworks": [
        "pevg",
        "para",
        "pattern-language"
      ],
      "regulation": [],
      "publications": [
        "prompt-systems-agent-orchestration"
      ],
      "instruments": [
        "e23-review-questions"
      ],
      "action": "engagements",
      "human": "fit-call",
      "chain": "expertise -> framework -> regulation -> publication -> instrument -> action -> human"
    },
    {
      "id": "llm-platform",
      "problem": "An LLM platform or pilot has to run in production at a predictable cost and quality.",
      "signals": [
        "llm",
        "rag",
        "retrieval",
        "routing",
        "gateway",
        "llmops",
        "platform",
        "pilot stuck",
        "inference"
      ],
      "expertise": [
        "llm-infrastructure",
        "enterprise-ai-architecture"
      ],
      "frameworks": [
        "pattern-language"
      ],
      "regulation": [],
      "publications": [
        "llm-systems-in-production",
        "devops-for-ai-native-platforms"
      ],
      "instruments": [],
      "action": "engagements",
      "human": "fit-call",
      "chain": "expertise -> framework -> regulation -> publication -> instrument -> action -> human"
    },
    {
      "id": "connect-assistant",
      "problem": "Someone wants to query this expertise from their own AI assistant.",
      "signals": [
        "claude",
        "chatgpt",
        "cursor",
        "mcp server",
        "assistant",
        "connect",
        "api"
      ],
      "expertise": [
        "machine-accessible-expertise"
      ],
      "frameworks": [],
      "regulation": [],
      "publications": [],
      "instruments": [
        "concylium"
      ],
      "action": null,
      "human": null,
      "chain": "expertise -> framework -> regulation -> publication -> instrument -> action -> human"
    }
  ]
}