Bill Commons
All policy developments

NIST AI 600-1: Generative Artificial Intelligence Profile

NIST voluntary cross-sector companion profile for managing generative-AI risks across the lifecycle, focused on governance, content provenance, pre-deployment testing, and incident disclosure.

Open dated briefingCoverage and methodology

Automated source check: observed.

Issuer
National Institute of Standards and Technology
Jurisdiction / parties
United States federal guidance
Instrument
federal guidance
Status
published voluntary · as of 2024-07-26
Published
2024-07-26
Last source check
2026-10-31T07:30:18.124533+00:00

What the instrument says

Useful federal guidance; not evidence of legal compliance.

  • No legally bound actor

    No legal duty; NIST presents suggested voluntary actions for relevant AI actors.

    NIST AI 600-1 Introduction

  • Organization using the profile

    Consider policies to evaluate risk-relevant capabilities and safety-measure robustness before deployment and on an ongoing basis.

    NIST AI 600-1 GV-1.2-002

What would need to be proven?

The following mappings are analysis. Candidate evidence is not proof that a vendor satisfies an obligation, and hardware attestation alone does not establish legal compliance.

Claim to examine
An organization performed a stated voluntary GAI risk-management action.
Candidate evidence
Governance policy, evaluation plan/results, incident register, and risk-treatment record.
Possible approach
Map evidence to the cited voluntary action and system context.
Assumptions
  • The organization elected to use the profile.
Limits and open questions
  • NIST AI 600-1 is voluntary guidance, not a binding federal standard or certification.

Original sources

  • NIST AI 600-1

    Introduction; §3; Appendix A

    Published: 2024-07-26 · Retrieved: 2026-10-31T07:30:18.124533+00:00

    Manual source audit: 2026-10-31T03:24:41Z

    Retrieval method: automated fetch

    • The July 2024 document presents a voluntary Generative AI Profile companion to the AI RMF.
    • GV-1.2-002 describes voluntary evaluation of risk-relevant capabilities and safety-measure robustness before deployment and on an ongoing basis.

    Audit limit: Not a binding federal standard, certification, or legal duty.

  • NIST official publication record: published July 26, 2024

    Published: 2024-07-26 · Retrieved: Not independently retrieved

    Manual source audit: 2026-10-31T03:34:33.823748+00:00

    Retrieval method: manual source audit

Observation history

This is Bill Commons’ retained observation history, not a complete history of the instrument. A changed source body requires review before its policy meaning is updated.

  1. 2026-10-31T03:24:41Z · registry record created

    Curated registry entry created; this is not a source retrieval.

  2. 2026-10-31T07:30:18.124533+00:00 · source check

    Source fetch outcome; body changes require human review and do not assert a policy change.