Five Laws of AI Governance — Changelog¶
Complete version history for the Five Laws of AI Governance and every NIST OLIR alignment mapping derived from it.
Current doctrine version: v1.0.1 · DOI 10.5281/zenodo.21271750
Jump to: Doctrine · NIST AI RMF 1.0 · NIST SP 800-53 Rev 5.2.0 · NIST CSF 2.0
Doctrine¶
The Five Laws of AI Governance. Five prohibitive statements about systems that can decide and act on their own. Published under CC BY 4.0 with a persistent DOI.
| Version | Date | Summary |
|---|---|---|
| 1.0.1 | 2026-07-09 | Deposited to Zenodo. Version DOI 10.5281/zenodo.21271750; concept DOI 10.5281/zenodo.21271749 resolves to the latest version. CC BY 4.0, ORCID 0009-0009-0791-4124. The Laws are stated in two registers: the Charter register is the full normative statement, the Prohibition register is the memorable form. Both are canonical. No change to the substance of any Law. |
| 1.0.0 | 2026-07-08 | Initial public release. Five Laws published as a citable repository with framework crosswalks to NIST AI RMF 1.0 and ISO/IEC 42001:2023. No enforcement or scoring mechanism disclosed. |
NIST AI RMF 1.0¶
Supportive Relationship Mapping of the Five Laws to the NIST AI Risk Management Framework 1.0 (NIST AI 100-1, January 2023). View mapping
| Version | Date | Summary |
|---|---|---|
| 1.0.0 | 2026-10-06 | Catalogued by the NIST OLIR Program as a Draft Informative Reference after passing screening and validation; 30-day public review begins. Not Final. |
| 1.0.0 | 2026-09-30 | Initial submission to the NIST OLIR Program. Seven relationships across six subcategories; all five Laws mapped; Comprehensive marked Yes. Every relationship is type supports with property example of. GOVERN 1.7 carries two relationships, to Law V and Law III, recorded as separate entries per NIST IR 8278Ar1 Section 3.2. Reference Document Element Descriptions quoted verbatim from the Charter register. |
NIST SP 800-53 Rev 5.2.0¶
Supportive Relationship Mapping of the Five Laws to NIST SP 800-53 Rev 5.2.0. View mapping
| Version | Date | Summary |
|---|---|---|
| 1.0.0 | 2026-10-06 | Catalogued by the NIST OLIR Program as a Draft Informative Reference after passing screening and validation; 30-day public review begins. Not Final. |
| 1.0.0 | 2026-09-30 | Initial submission to the NIST OLIR Program. Eleven relationships across eleven controls and control enhancements in the AU, CA, SA, AC, CM, and IR families; all five Laws mapped; Comprehensive marked Yes. Five relationships relate Law III to AU-09, AU-09(02), AU-09(03), AU-09(04), and AU-11, the control statements that name the custodial properties the Law states. AU-09(01) is not related: it specifies hardware-enforced write-once media, and the Law states append-only as a property of the record without naming a medium. |
NIST CSF 2.0¶
Supportive Relationship Mapping of the Five Laws to the NIST Cybersecurity Framework 2.0 (NIST CSWP 29, February 26, 2024). View mapping
| Version | Date | Summary |
|---|---|---|
| 1.0.0 | 2026-10-06 | Catalogued by the NIST OLIR Program as a Draft Informative Reference after passing screening and validation; 30-day public review begins. Not Final. |
| 1.0.0 | 2026-09-30 | Initial submission to the NIST OLIR Program. Six relationships across six Subcategories; all five Laws mapped; Comprehensive marked Yes. No GOVERN Subcategory other than GV.OV-03 is related: GOVERN outcomes are organizational, and the Laws state properties of a system's conduct while it runs. Law III carries two relationships, at PR.PS-04 and RS.AN-07. |
Versioning¶
Version numbers follow the NIST OLIR convention defined in NIST IR 8278Ar1 Section 3.1.9. A major version indicates changes that may require current implementations to be modified. A minor version indicates one or more new relationships without removal or modification of existing relationships. An administrative version indicates typographical or stylistic changes.
Doctrine versions are independent of mapping versions. A mapping records its own version against the focal document it maps to.