Maha Policy · discovery index
Mechanisms
How a policy instrument or governance control is intended to work, separated from measured outcomes.
This index contains 30 active, exact-revision Policy pages. Inclusion does not transfer evidence, authority, jurisdiction, or review from one topic to another.
30 governed pages
Agent Identity — Mechanisms
Agent Identity, in this mechanism analysis, is limited to the following inspected scope. A SPIFFE ID names a workload within a trust domain, and a signed SVID lets a compute endpoint present that identifier for cryptographic verification. The guidelines define assurance concepts for identity proofing, authentication, federation, identifiers, and subscriber accounts for natural-person subjects. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗AI Agent Accountability — Mechanisms
AI Agent Accountability, in this mechanism analysis, is limited to the following inspected scope. Accountability according to role, traceability, and systematic risk management. Logging, oversight, incident/corrective duties, and deployer obligations for covered systems. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Algorithmic Impact Assessment — Mechanisms
Algorithmic Impact Assessment, in this mechanism analysis, is limited to the following inspected scope. The questionnaire evaluates system, algorithm, decision, impact, and data factors to determine an impact level and associated mitigations under the Directive on Automated Decision-Making. The Directive applies to scoped Canadian federal automated systems that make or assist administrative decisions and meet all stated scope elements. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Assurance Cases — Mechanisms
Assurance Cases — Mechanisms is implemented as a source-bounded mechanisms guide.
Read governed page ↗Auditability — Mechanisms
Auditability — Mechanisms: Understand Auditability through the mechanisms lens in Policy Clearing on policy.mahastrategies.com.
Read governed page ↗Automated Decision Governance — Mechanisms
Automated Decision Governance, in this mechanism analysis, is limited to the following inspected scope. EU restrictions and safeguards for certain decisions based solely on automated processing. Human-oversight objectives and capabilities for high-risk AI systems. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Biometric Governance — Mechanisms
Biometric Governance, in this mechanism analysis, is limited to the following inspected scope. Definitions and conditions for biometric identification, categorisation, remote identification, and selected prohibited or high-risk uses. Definition of biometric data and restrictions on special-category processing and automated decisions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Capability Controls — Mechanisms
Capability Controls, in this mechanism analysis, is limited to the following inspected scope. Sender-constrained access tokens and restriction to minimum required privileges, audience, resources, and actions. Enforcing approved authorizations and limiting privileges to required functions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Competition Policy — Mechanisms
Competition Policy — Mechanisms is limited to the bound authority, implementation, or commercial acquisition state and carries its exclusions explicitly.
Read governed page ↗Copyright And Training Data — Mechanisms
Copyright And Training Data, in this mechanism analysis, is limited to the following inspected scope. EU text-and-data-mining exceptions, lawful access, retention, and machine-readable reservation. GPAI-provider copyright policy and public training-content summary duties. Current U.S. Copyright Office analysis of training uses and licensing questions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Data Protection — Mechanisms
Data Protection, in this mechanism analysis, is limited to the following inspected scope. EU data-processing principles, automated decisions, controller responsibility, and data protection by design/default. Operational privacy-risk management functions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Digital Public Infrastructure — Mechanisms
Digital Public Infrastructure — Mechanisms is limited to the bound authority, implementation, or commercial acquisition state and carries its exclusions explicitly.
Read governed page ↗Export Controls — Mechanisms
Export Controls, in this mechanism analysis, is limited to the following inspected scope. The EAR organizes U.S. dual-use export controls through classifications, destinations, end uses, end users, license requirements, and exceptions. GAO describes the 2022–2023 advanced-semiconductor controls, later updates, and reported compliance challenges including rule frequency and complexity. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Health AI Governance — Mechanisms
Health AI Governance, in this mechanism analysis, is limited to the following inspected scope. WHO frames health-AI governance through autonomy, well-being and safety, transparency, accountability, inclusion, and sustainability. The principles address multidisciplinary expertise, representative data, independent test sets, appropriate reference standards, human-AI interaction, deployed performance, and user information for ML-enabled medical devices. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Human Oversight — Mechanisms
Human Oversight, in this mechanism analysis, is limited to the following inspected scope. Human oversight objectives, competence, interpretation, override, intervention, and stop capability for high-risk systems. A human able to deny tool invocations in MCP deployments. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Incident Reporting — Mechanisms
Incident Reporting — Mechanisms is limited to the behavior or authority established by the bound source and explicitly excludes the source's non-claims.
Read governed page ↗Intellectual Property — Mechanisms
Intellectual Property — Mechanisms is limited to the behavior or authority established by the bound source and explicitly excludes the source's non-claims.
Read governed page ↗International Coordination — Mechanisms
International Coordination, in this mechanism analysis, is limited to the following inspected scope. Cross-border and cross-sector knowledge sharing, consensus technical standards, and comparable indicators are mechanisms for AI-policy coordination. A treaty framework for lifecycle consistency with human rights, democracy, and the rule of law, with cooperation and follow-up mechanisms. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Interoperability — Mechanisms
Interoperability — Mechanisms is limited to the behavior or authority established by the bound source and explicitly excludes the source's non-claims.
Read governed page ↗Machine Contracting — Mechanisms
Machine Contracting, in this mechanism analysis, is limited to the following inspected scope. The Model Law supplies legislators with rules for recognizing automation in contract formation and performance, including AI, smart contracts, and machine-to-machine transactions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Model Evaluation — Mechanisms
Model Evaluation, in this mechanism analysis, is limited to the following inspected scope. Evaluation begins from intended context and risk, documents tests, metrics and methods, uses representative conditions where appropriate, involves independent or affected actors as needed, and reports residual uncertainty and tradeoffs. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Public Sector Procurement — Mechanisms
Public Sector Procurement, in this mechanism analysis, is limited to the following inspected scope. Covered U.S. federal agencies are directed to use cross-functional acquisition planning, protect privacy and government data, define IP terms, test systems in realistic settings, address lock-in, and use outcome-linked performance requirements and monitoring. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Public Trust — Mechanisms
Public Trust, in this mechanism analysis, is limited to the following inspected scope. Disclosure, meaningful information, and ability to challenge AI outcomes. Documentation, communication of impacts, limits, transparency, and accountability. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Quantum Policy — Mechanisms
That a federal standard now specifies a key-encapsulation mechanism, ML-KEM, in three parameter sets, believed secure against an adversary possessing a quantum computer.
Read governed page ↗Research Integrity — Mechanisms
Research Integrity, in this mechanism analysis, is limited to the following inspected scope. Reliability, honesty, respect, and accountability frame good research practice and responsibilities. The current PHS rule defines covered research misconduct and requirements for findings and proceedings within its statutory scope. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Scientific Evidence Policy — Mechanisms
Scientific Evidence Policy, in this mechanism analysis, is limited to the following inspected scope. Covered federal agencies are directed to connect priority questions to fit-for-purpose methods, quality across the evidence lifecycle, transparent plans, and learning agendas. OSTP defines responsibilities and an evaluation programme for scientific integrity in federal scientific activities and evidence-informed decisions. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Semiconductor Policy — Mechanisms
Semiconductor Policy, in this mechanism analysis, is limited to the following inspected scope. The statute establishes U.S. semiconductor incentive, research, manufacturing, workforce, guardrail, and related programme authorities and appropriations. The regulation defines EU semiconductor objectives and mechanisms for initiative capacity, integrated production and open foundries, coordination, monitoring, and crisis response. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Standards And Conformity — Mechanisms
That conformity assessment is the demonstration that specified requirements relating to a product, process, system, person or body are fulfilled, and that it includes testing, inspection, certification and the accreditation of the bodies performing those activities.
Read governed page ↗Tool Governance — Mechanisms
Tool Governance, in this mechanism analysis, is limited to the following inspected scope. Ability to deny invocations and communicate tool exposure. Policy decision and enforcement points for each request. The answer carries the source boundaries forward and does not infer authority from a neighboring topic.
Read governed page ↗Traceability — Mechanisms
Traceability — Mechanisms is limited to the bound authority, implementation, or commercial acquisition state and carries its exclusions explicitly.
Read governed page ↗