Language governments and boards already speak

The future state is designed to be mappable to NIST CSF 2.0, SP 800-53 control families, Zero Trust (SP 800-207 / DoD ZT concepts), CISA CPGs, and NIST AI RMF for decision systems. Mapping is not the same as authorization. We do not claim FedRAMP, DoD ATO, or CIA / NSA / DIA / FBI / DHS endorsement or use. Vocabulary follows published NIST CSF 2.0, SP 800-53, SP 800-207, AI RMF, CISA CPGs, and public NSA Zero Trust CSI — so a board and a GRC team share one language.

Govern

Control ownership per plane. RACI. Continuous evidence packs. Configuration as code. AEGIS kernel is where those gates live inside Ikaros.

Protect & detect

Least privilege, segment isolation, secure web gateway on private paths, detection-as-code, ATT&CK-informed coverage.

AI accountability

PDE is decision support with bounded automation. Prohibited actions list. Decision journal. Human sovereignty on high impact. AUTO_SAFE is not enabled. Until a written false-positive window and rollback exist, every proposed act is HUMAN_ONLY.

For federal, SLTT, defense-adjacent enterprise, private SOC, and public think tanks, the offer is the same spine at different assurance depths: a fabric that remains auditable as it becomes ambitious—and a briefing vocabulary that does not fracture under scrutiny.

AUTO_SAFE policy (status: OFF). Not enabled. Not a live autonomy claim. Design-intention criteria (not measured — no paid-pilot data yet): graduate only reversible, low-impact acts if false-positive rate on those acts is ≤ 2% over a 30-day window. Rollback: any rolling 7-day window > 5%, or any high-impact misfire, reverts the gate to HUMAN_ONLY within one hour. Until a first paid Field Mandate pilot produces a measured window, every proposed act is HUMAN_ONLY.

PDE / CEP-Rank model-card (kind, not method). Ranking is classical / rules + scored correlation on fused signals. Full card: CEP-Rank. A language model, if used at all, narrates an already-ranked journal. It does not rank and does not gate. Journal shape: Journal. Two-quarter plan: Roadmap.

On the ENGINE PATH. Govern is the Gate overlay — CSF / 800-53 residual risk, not a hop that skips AEGIS. Dual-plane PEPs, dedicated enclave, untrusted ≠ enrolled. Telemetry stays in the customer enclave — not multi-tenant SaaS. See Architecture and Ikaros.