Main site ↗

Docs / Frameworks / UAIF™

UAIF™ Unified AI Incident Framework

A common taxonomy and schema for describing an AI incident.

Version v1.0Status Final PublicationScope 3 profiles: Core, Enterprise, Regulatory · 2 extensions: SOC_SIEM, AI_Security

Three profiles. Two additive extensions.

UAIF™ v1.0 defines three conformance profiles — Core, Enterprise and Regulatory — and two additive extensions, SOC_SIEM and AI_Security.

UAIF™ v1.0 — Final Publication (designated 30 July 2026). Final Publication means the specification, vocabulary, conformance architecture and schema behaviour are frozen under change control. It does not establish sector calibration, regulator endorsement, production deployment maturity or independent inter-rater evidence.

Conformance test suite: developed; not yet published.

Read the readiness report and download →

Start here

Library

UAIF™ library. Select a column heading to sort.
Actions
CHT-UAIF-083UAIF™ Classification Cheat SheetCheat sheetFinal Publication1.014 Jul 20264 Oct 2026PublicPDF ↓
CHT-UAIF-084UAIF™ Severity Cheat SheetCheat sheetFinal Publication1.014 Jul 20264 Oct 2026PublicPDF ↓
CLA-002UAIF™ Contributor Licence AgreementLegal instrumentFinal Publication1.0––PublicPDF ↓
ERR-UAIF-001Normative Errata: UAIF™ v1.0 TCR-STD-002 / TCR-STD-003Governance recordClosed — integrated into UAIF™1.0––PublicPDF ↓
EXB-STD-001UAIF™ Executive BriefExecutive briefFinal Publication1.0Jun 20264 Oct 2026PublicPDF ↓
IMP-UAIF-037UAIF™ Implementation GuideImplementation guideFinal Publication1.014 Jul 20264 Oct 2026PublicPDF ↓
IMP-UAIF-043UAIF™ Incident Reporting TemplateImplementation guideFinal Publication1.014 Jul 20264 Oct 2026PublicPDF ↓
REL-UAIF-001UAIF™ v1.0 Release NotesRelease notesFinal Publication1.030 Jul 20264 Oct 2026PublicPDF ↓
RPT-STD-005UAIF™ v1.0 Final Readiness and Normative Conformance ReportTechnical reportFinal Publication1.0–14 Aug 2026PublicPDF ↓
TCR-STD-002UAIF™ v1.0 Technical SpecificationTechnical reportFinal Publication1.014 Aug 2026–PublicPDF ↓
TCR-STD-003UAIF™ Schema SpecificationTechnical reportFinal Publication1.014 Aug 2026–PublicPDF ↓
TCR-UAIF-014UAIF™ Data DictionaryTechnical referenceFinal Publication1.014 Jul 20264 Oct 2026PublicPDF ↓
TCR-UAIF-015UAIF™ Validation Rules CatalogueTechnical referenceFinal Publication1.014 Jul 20264 Oct 2026PublicPDF ↓
TCR-UAIF-018UAIF™ Reference Incident RecordsTechnical referenceFinal Publication1.014 Jul 20264 Oct 2026PublicPDF ↓
TCR-UAIF-020UAIF™ Change LogRelease recordFinal Publication1.014 Jul 20264 Oct 2026PublicPDF ↓
TCR-UAIF-023UAIF™ Security and Privacy Handling GuideTechnical referenceFinal Publication1.014 Jul 2026–PublicPDF ↓
UAIF-DCA-004UAIF™ Data Contribution AgreementLegal instrumentFinal Publication1.0–4 Oct 2026PublicPDF ↓
UAIF-DPR-007UAIF™ Defensive Publication TemplateLegal instrumentFinal Publication1.0–4 Oct 2026PublicPDF ↓
UAIF-IP-001UAIF™ Intellectual Property PolicyLegal instrumentFinal Publication1.1Jun 20264 Oct 2026PublicPDF ↓
WHP-STD-004UAIF™ Licensing ModelLicensing summaryFinal Publication1.0Jun 20264 Oct 2026PublicPDF ↓

UAIF™ v1.0 timeline

UAIF v1.0 timeline
Date What happened Source
30 Jul 2026 UAIF™ v1.0 designated Final Publication. From this point the v1.0 normative baseline is fixed under versioned change control: corrections are issued as dated errata, and the version stays v1.0. REL-UAIF-001, RPT-STD-005
14 Aug 2026 Normative errata closed and integrated into v1.0. The readiness report was updated after the conformance verification; the Technical Specification and Schema Specification were published as v1.0. ERR-UAIF-001, RPT-STD-005
4 Oct 2026 Explanatory and practitioner documents regenerated to match the canonical schema (uaif-core-v1.0.json). They are explanatory references: where one differs from the schema, the schema governs. The normative documents were not reissued. TCR-UAIF-014 and the revision histories of the documents concerned

Sector calibration packages

UAIF™ sector calibration packages are Controlled publications. Request access to a sector package.

Related: GAISSF™ sets the control context · AI-IRF™ can use a UAIF™ record as structured incident context; UAIF™ itself does not decide containment, recovery or legal action