A claim is only as strong as the evidence behind it.
AIT-12 says which controls a deployment needs. AIE-12 says what counts as proof that they are in place: how strong the evidence must be, who must produce it, and how long it stays valid. The higher the horizon, the less an implementer’s word is enough on its own.
AIH-12 classifies. AIT-12 sets the gate. AIE-12 proves.
Grading the evidence
A statement by the implementer. Nothing has been checked.
Shown working, under conditions chosen by the implementer.
A recorded real-world instance, with enough detail for someone else to examine.
A test someone else can re-run and get the same result.
Assessed in a bounded live deployment, with stated conditions and published failures.
Examined by a party with no stake in the result, who publishes the findings.
Weakest to strongest. These classes replace the earlier E0–E5 proposal (register item OCC-E-003).
Twelve evidence profiles
Each profile matches one AIT-12 threshold. To claim Tn, every control in it must be supported to at least profile En.
| Profile | Supports | Minimum evidence | Independence | Valid for |
|---|---|---|---|---|
| E1 | T1 | Assertion | Self | Current at time of claim |
| E2 | T2 | Assertion, plus a Demonstration of disclosure | Self | 24 months |
| E3 | T3 | Demonstration | Self | 24 months |
| E4 | T4 | Reproducible test (core tasks) | Self, re-runnable by others | 12 months |
| E5 | T5 | Reproducible test of interruption and revocation; Documented case for authority limits | Self, re-runnable by others | 12 months |
| E6 | T6 | Controlled pilot of chain revocation | Second party recommended | 6 months |
| E7 | T7 | Independent review of capability evaluation | Independent | 6 months |
| E8 | T8 | Independent review plus Controlled pilot | Independent | 6 months |
| E9 | T9 | Continuous independent review · speculative | Independent and public | Continuous |
| E10 | T10 | Institutional review record · speculative | Public institution | Continuous |
| E11 | T11 | Multilateral review record · speculative | Multi-jurisdiction | Continuous |
| E12 | T12 | Not defined · speculative | Not applicable | Not applicable |
How evidence is weighed
A profile is met only when every control in the matching threshold is supported at or above the minimum class. One strong test does not cover a weak one elsewhere.
Each piece of evidence carries its class, who produced it, and the date. Unlabelled evidence counts as an assertion.
Evidence older than the freshness period no longer supports the claim. A material change to the deployment resets the clock.
Where a control is supported below the minimum class, the claim says so. It is recorded as “evidence below profile”, not hidden.
Published failures from pilots and incidents are part of the record. A profile that only ever shows passes is incomplete.
Every evidence statement says what could not be checked. Unknowns are recorded as unknowns.