SPECIFICATION // RFC-004

Kob AI Decision Framework (K-AIDF)

Core specification for sovereign code-level AI policy validation.

1. Architectural Thesis

Traditional AI risk frameworks fail because they are documented as static narrative guidelines (PDFs, spreadsheets). K-AIDF compiles these high-level regulatory bounds (NIST AI RMF 1.0, ISO/IEC 42001, EU AI Act High-Risk systems, LGPD) directly into deterministic Abstract Syntax Tree (AST) analyzers and active CI/CD guardrails.

2. Core CLI Verification Matrix (`kob audit`)

kob audit \
  --ruleset=kaidf-sovereignty-v2 \
  --target=./src \
  --fail-on-leakage=true \
  --output=scorecard.json

3. Traceability Mapping

NIST AI RMF: GOVERN 1.2

Deterministic identity check and prompt-injection runtime fences.

ISO 42001: CONTROL A.6

Auditability of training payload isolation and local VPC residency.