Review category ? Choose the review category this evidence item helps answer. Each item should be attached to exactly one category. Category 1: Workflow Scope & AI Use Category 2: Authorization & Limits Category 3: Evaluation & Readiness Category 4: Operational Monitoring & Change Control Category 5: Failure Handling & Escalation
Category 2
Authorization & Limits What is this AI workflow allowed to do, and what is off limits?
Helpful evidence may include...
approved use-case description scope statement operating limits prohibited-use list data-use rules output-use rules human-review requirements approval record risk acceptance note launch decision record change-control rule escalation or pause authority customer-facing disclosure internal policy or standard Evidence type ? Choose the evidence type that best describes what this item helps prove for the selected review category. Owner Approver Record Decision Note Launch Approval Record Risk Acceptance Note Escalation Path Human Authorization Rule Customer Facing Claim Other
Evidence format ? Choose how reviewers should access this item: upload a private file, link to a client-controlled source, answer in text, or describe evidence that cannot be transferred. Uploaded file External link Written answer No-transfer / describe-only note
Upload file Allowed in v0: PDF, DOCX, XLSX, CSV, TXT, Markdown, PNG, JPG. Demo uploads start pending scan. Sensitivity ? Use Restricted for material with tighter access limits or sensitive customer/internal details. Use Confidential for ordinary non-public evidence. Use Low sensitivity only when the item is safe to treat as low sensitivity. Low sensitivity Confidential Restricted
Evidence owner ? Name the team or person this evidence should be associated with in the client-facing report. Use the person who can explain the context, not direct contact details.
Evidence date ? Use the date the evidence was created, approved, tested, or last materially updated.
Current status note ? Explain whether the evidence is current, partial, superseded, time-bound, or awaiting an update.
Source system ? Name where the evidence comes from, such as Notion, Jira, GitHub, Drive, a dashboard, or a policy repository.
Notes ? Add optional context that will help reviewers interpret the item without changing the evidence itself.