CSOAI · measurement body

Measure it. Sign it. Leave the cell empty if we cannot.

Council of AI is a measurement body. A grade is never sold. Verify is free. We do not certify. We do not remediate. The living board stays honest.

You are interacting with an AI system.

The page mounts SovereignSpot, whose 'Ask your Council assistant' box sends your question through askSovereign to the configured /api/chat model endpoint, where a single model writes the answer; no Council review, vote, or signature is implied. The Article 50(1) notice is mounted at the top of the page, before the chat panel.

Disclosed under EU AI Act Article 50(1). Every surface and its classification

Frameworks we measure against · built on open source · verifiable

Every badge links to its official source. We measure against these — we do not claim endorsement or certification.

33 seat council design (canon)32 MCP tools reachable (probed)Ed25519 Layer 0 signing0.95 care-flooreach figure labelled with its source

EU AI Act NIST AI RMF ISO/IEC 42001 ISO/IEC 27001 SOC 2 GDPR NIS2 DORA CRA FedRAMP 20x OMB M-24-10 Colorado AI Act OECD.AI NIST ENISA CISA UK AISI NCSC UK NATO UN OSCAL OpenSSF Sigstore OPA Cedar Nmap OpenVAS Nuclei

OWASP ZAP

Trivy OSV

Kubernetes

Linux Model Context Protocol Ed25519 W3C DID W3C VC x402

OpenTelemetry

OpenAPI EU AI Act NIST AI RMF ISO/IEC 42001 ISO/IEC 27001 SOC 2 GDPR NIS2 DORA CRA FedRAMP 20x OMB M-24-10 Colorado AI Act OECD.AI NIST ENISA CISA UK AISI NCSC UK NATO UN OSCAL OpenSSF Sigstore OPA Cedar Nmap OpenVAS Nuclei

OWASP ZAP

Trivy OSV

Kubernetes

Linux Model Context Protocol Ed25519 W3C DID W3C VC x402

OpenTelemetry

OpenAPI

Regulation we map & help you comply withStandards / oversight body we trackOpen source the OS is built onOpen standard we implementJurisdiction / alliance we chart (not a partner)

Council OS — why measurement is not a certificate

Answers from published measurement, or it refuses. Your question is typed into the lobby — nothing sends until you press Ask.

Open Council OS

Deterministic pane commands · grounded /api/chat lane · consent checkpoint on consequential steps

Council of AI vs a certificate shop

Capability	Council of AI	Certificate / GRC shop
What we do	✓Measure a system and return a signed artefact	Sell a certificate or a remediation package
What we do not do	✓We do not certify. We do not remediate.	Attestation PDFs and fix-it retainers
Proof	✓Ed25519-signed card — verify from the artefact	Trust-us reports
Board	✓Living numbers from GET /api/gspc. Empty cells stay empty.	Hardcoded leaderboard copy
Verify	✓Free forever at /gspc-verify	Paywalled audit packs
Inbound	✓A system becomes a signed evidence artefact	A sales pipeline

What a stranger can do

Screen the scope

Describe the system. POST /api/assess returns possible provision matches and unverified caller-claimed control coverage. It does not decide legal tier, run a GSPC benchmark, or issue a certificate.

Ask gets a published answer

The lobby Ask is grounded. Empty cells stay empty. We do not invent scores.

Verify is free

Anyone can verify a signed artefact at /gspc-verify. A grade is never sold.

Enterprise is a lobby door

/enterprise opens the measured lobby. It is not a pricing page and not a certification desk.

Signed evidence

Inbound systems become Ed25519 artefacts. Text-only classifier. We do not fetch or probe. We do not remediate.

Living board

Counts come from GET /api/gspc. Ties are ties. Do not invent missing cards.

Get measured. Verify free. Empty cells stay empty.

Get measured →Verify free →Enterprise lobby →