Obligations attach to role, risk class, and the act of placing on the market. Real-world testing is carved out of the pre-market exclusion, and the 2026 amendments moved the high-risk dates.
5 min read
The decision the operate phase exists to produce. Three named outcomes, three others that get hidden inside them, and a default that applies when the evidence is missing.
5 min read
A precommitted criterion works only where the sponsor survives triggering it. Escalation of commitment is the mechanism it has to defeat, and it was demonstrated in the people who made the original choice.
5 min read
Recorded conditions for stopping, agreed before anyone sees the evidence they govern. Six trigger families, and the rule that a stop decision and a finding about value are separate statements.
5 min read
SR 26-2 replaced SR 11-7 in April 2026 and its footnote 3 puts generative and agentic AI outside scope. Being out of scope routes the work elsewhere; it does not remove it.
4 min read
One is a voluntary risk framework applied to a system, the other a certifiable management system applied to an organisation. Cited as alternatives, they answer different questions and neither certifies an application.
4 min read
The transition is caused by use, not by declaration. A real decision, a real customer, a real record — and the obligations attach retroactively to work already done.
4 min read
A reported failure rate converts an admission into a screening filter. It only works if the denominator is disclosed, because a zero-failure portfolio is a claim about reporting.
5 min read
A business arrangement can exist with no contract and no payment, so the free pilot is already inside scope. And some obligations survive the relationship ending.
5 min read
Tell us what you're working on and where you need help.