Maha Policy · discovery index
Implementation
Operational steps, controls, refusal conditions, and evidence requirements.
This index contains 30 active, exact-revision Policy pages. Inclusion does not transfer evidence, authority, jurisdiction, or review from one topic to another.
30 governed pages
Agent Identity — Implementation
Agent Identity, in this implementation guide, is limited to the following inspected scope. A SPIFFE ID names a workload within a trust domain, and a signed SVID lets a compute endpoint present that identifier for cryptographic verification. The guidelines define assurance concepts for identity proofing, authentication, federation, identifiers, and subscriber accounts for natural-person subjects. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗AI Agent Accountability — Implementation
AI Agent Accountability, in this implementation guide, is limited to the following inspected scope. Accountability according to role, traceability, and systematic risk management. Logging, oversight, incident/corrective duties, and deployer obligations for covered systems. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Algorithmic Impact Assessment — Implementation
Algorithmic Impact Assessment, in this implementation guide, is limited to the following inspected scope. The questionnaire evaluates system, algorithm, decision, impact, and data factors to determine an impact level and associated mitigations under the Directive on Automated Decision-Making. The Directive applies to scoped Canadian federal automated systems that make or assist administrative decisions and meet all stated scope elements. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Assurance Cases — Implementation
Assurance Cases — Implementation is implemented as a source-bounded implementation guide.
Read governed page ↗Auditability — Implementation
Auditability — Implementation: Understand Auditability through the implementation lens in Policy Clearing on policy.mahastrategies.com.
Read governed page ↗Automated Decision Governance — Implementation
Automated Decision Governance, in this implementation guide, is limited to the following inspected scope. EU restrictions and safeguards for certain decisions based solely on automated processing. Human-oversight objectives and capabilities for high-risk AI systems. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Biometric Governance — Implementation
Biometric Governance, in this implementation guide, is limited to the following inspected scope. Definitions and conditions for biometric identification, categorisation, remote identification, and selected prohibited or high-risk uses. Definition of biometric data and restrictions on special-category processing and automated decisions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Capability Controls — Implementation
Capability Controls, in this implementation guide, is limited to the following inspected scope. Sender-constrained access tokens and restriction to minimum required privileges, audience, resources, and actions. Enforcing approved authorizations and limiting privileges to required functions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Competition Policy — Implementation
Competition Policy — Implementation is implemented as a source-bounded implementation guide.
Read governed page ↗Copyright And Training Data — Implementation
Copyright And Training Data, in this implementation guide, is limited to the following inspected scope. EU text-and-data-mining exceptions, lawful access, retention, and machine-readable reservation. GPAI-provider copyright policy and public training-content summary duties. Current U.S. Copyright Office analysis of training uses and licensing questions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Data Protection — Implementation
Data Protection, in this implementation guide, is limited to the following inspected scope. EU data-processing principles, automated decisions, controller responsibility, and data protection by design/default. Operational privacy-risk management functions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Digital Public Infrastructure — Implementation
Digital Public Infrastructure — Implementation is implemented as a source-bounded implementation guide.
Read governed page ↗Export Controls — Implementation
Export Controls, in this implementation guide, is limited to the following inspected scope. The EAR organizes U.S. dual-use export controls through classifications, destinations, end uses, end users, license requirements, and exceptions. GAO describes the 2022–2023 advanced-semiconductor controls, later updates, and reported compliance challenges including rule frequency and complexity. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Health AI Governance — Implementation
Health AI Governance, in this implementation guide, is limited to the following inspected scope. WHO frames health-AI governance through autonomy, well-being and safety, transparency, accountability, inclusion, and sustainability. The principles address multidisciplinary expertise, representative data, independent test sets, appropriate reference standards, human-AI interaction, deployed performance, and user information for ML-enabled medical devices. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Human Oversight — Implementation
Human Oversight, in this implementation guide, is limited to the following inspected scope. Human oversight objectives, competence, interpretation, override, intervention, and stop capability for high-risk systems. A human able to deny tool invocations in MCP deployments. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Incident Reporting — Implementation
Incident Reporting — Implementation: Understand Incident Reporting through the implementation lens in Policy Clearing on policy.mahastrategies.com.
Read governed page ↗Intellectual Property — Implementation
Intellectual Property — Implementation is limited to the bound authority, implementation, or commercial acquisition state and carries its exclusions explicitly.
Read governed page ↗International Coordination — Implementation
International Coordination, in this implementation guide, is limited to the following inspected scope. Cross-border and cross-sector knowledge sharing, consensus technical standards, and comparable indicators are mechanisms for AI-policy coordination. A treaty framework for lifecycle consistency with human rights, democracy, and the rule of law, with cooperation and follow-up mechanisms. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Interoperability — Implementation
Interoperability — Implementation is limited to the behavior or authority established by the bound source and explicitly excludes the source's non-claims.
Read governed page ↗Machine Contracting — Implementation
Machine Contracting — Implementation: Understand Machine Contracting through the implementation lens in Policy Clearing on policy.mahastrategies.com.
Read governed page ↗Model Evaluation — Implementation
Model Evaluation — Implementation: Understand Model Evaluation through the implementation lens in Policy Clearing on policy.mahastrategies.com.
Read governed page ↗Public Sector Procurement — Implementation
Public Sector Procurement, in this implementation guide, is limited to the following inspected scope. Covered U.S. federal agencies are directed to use cross-functional acquisition planning, protect privacy and government data, define IP terms, test systems in realistic settings, address lock-in, and use outcome-linked performance requirements and monitoring. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Public Trust — Implementation
Public Trust, in this implementation guide, is limited to the following inspected scope. Disclosure, meaningful information, and ability to challenge AI outcomes. Documentation, communication of impacts, limits, transparency, and accountability. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Quantum Policy — Implementation
Quantum Policy — Implementation: Understand Quantum Policy through the implementation lens in Policy Clearing on policy.mahastrategies.com.
Read governed page ↗Research Integrity — Implementation
Research Integrity, in this implementation guide, is limited to the following inspected scope. Reliability, honesty, respect, and accountability frame good research practice and responsibilities. The current PHS rule defines covered research misconduct and requirements for findings and proceedings within its statutory scope. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Scientific Evidence Policy — Implementation
Scientific Evidence Policy, in this implementation guide, is limited to the following inspected scope. The Act defines evaluation for its federal scope and requires agency evidence-building plans, annual evaluation plans, evaluation officers, capacity assessment, and government-wide evaluation guidance. The order states current executive-branch scientific-integrity direction, including transparency, uncertainty, alternative hypotheses, reproducibility, and reevaluation of intervening policies. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Semiconductor Policy — Implementation
Semiconductor Policy, in this implementation guide, is limited to the following inspected scope. The statute establishes U.S. semiconductor incentive, research, manufacturing, workforce, guardrail, and related programme authorities and appropriations. The regulation defines EU semiconductor objectives and mechanisms for initiative capacity, integrated production and open foundries, coordination, monitoring, and crisis response. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Standards And Conformity — Implementation
Standards And Conformity — Implementation: Understand Standards And Conformity through the implementation lens in Policy Clearing on policy.mahastrategies.com.
Read governed page ↗Tool Governance — Implementation
Tool Governance, in this implementation guide, is limited to the following inspected scope. Ability to deny invocations and communicate tool exposure. Policy decision and enforcement points for each request. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Traceability — Implementation
Traceability — Implementation: Understand Traceability through the implementation lens in Policy Clearing on policy.mahastrategies.com.
Read governed page ↗