Seven immutable System Laws govern every IOA decision
They are the source of policy truth.
What these scores mean
Each Law's sub-score reflects IOA's observed governance posture for that dimension, calculated from runtime signals and 1M simulations (method). The Overall Score is a weighted aggregation across all seven Laws. These are deployment-level scores (not vendor model ratings) and are backed by cryptographically signed evidence bundles.
Compliance Supremacy
All actions must comply with applicable regulations and standards, with jurisdiction-specific compliance checks before execution. See how this law contributes to the Assurance Score.
Security & Safety
All actions must comply with applicable regulations and standards, with jurisdiction-specific compliance checks before execution. See how this law contributes to the Assurance Score.
Privacy & Data Minimization
All actions must comply with applicable regulations and standards, with jurisdiction-specific compliance checks before execution. See how this law contributes to the Assurance Score.
Fairness & Non-Discrimination
All actions must comply with applicable regulations and standards, with jurisdiction-specific compliance checks before execution. See how this law contributes to the Assurance Score.
Reliability & Resilience
All actions must comply with applicable regulations and standards, with jurisdiction-specific compliance checks before execution. See how this law contributes to the Assurance Score.
Auditability & Traceability
All actions must comply with applicable regulations and standards, with jurisdiction-specific compliance checks before execution. See how this law contributes to the Assurance Score.
Sustainability
All actions must comply with applicable regulations and standards, with jurisdiction-specific compliance checks before execution. See how this law contributes to the Assurance Score.
Overall Assurance
Combined score across all seven System Laws, representing overall governance health and compliance readiness.
FAQ
How are scores calculated? Weighted signals from runtime policy passes, redaction efficacy, fairness checks, reliability health, audit completeness, and sustainability metrics; validated over 1M simulations. See Methodology.
Do compliance cartridges replace the Seven Laws? No. Cartridges map regulatory requirements (e.g., GDPR, HIPAA) to runtime controls under Law 1 (Compliance Supremacy). All other Laws remain active and contribute to posture.
What is the difference between Laws and Cartridges? Laws are universal governance dimensions; cartridges are framework-specific mappings and tests.
More questions? See the FAQ.