{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"authority":"guidance","category":"nist-ai-tevv-athlon"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-ai-tevv-athlon/","description":"NIST AI 200-2: TEVV-Athlon Framework for Evaluating AI Systems","details":{"amendmentState":"Initial public draft; public comments close 2026-10-06","authority":"guidance","effectiveDate":null,"note":"Initial public draft of a general AI evaluation framework, applicable to agentic systems. These six selected topics cover evaluation design and agent security testing; they are not a complete crosswalk of the publication. NIST-TEVV identifiers are local catalog references, not NIST control numbers. The confidentiality, injection, and tool-abuse topics relate to the lethal trifecta, but the draft does not prescribe an architecture that makes that combination safe or a required testing frequency.","propositions":[{"id":"NIST-TEVV-01","sourcePages":"NIST AI 200-2 ipd sections 2.1-2.2, pp. 3-6","title":"Define evaluation objectives, context, and measurements"},{"id":"NIST-TEVV-02","sourcePages":"NIST AI 200-2 ipd sections 2.3-2.4, pp. 6-7","title":"Run evaluations and examine results and limitations"},{"id":"NIST-TEVV-03","sourcePages":"NIST AI 200-2 ipd section 4.3.2, pp. 14-15; Appendix C, pp. 25-26","title":"Evaluate AI systems in realistic operating settings"},{"id":"NIST-TEVV-04","sourcePages":"NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Confidentiality attacks","title":"Test for disclosure of confidential information"},{"id":"NIST-TEVV-05","sourcePages":"NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Integrity attacks","title":"Test direct and indirect prompt injection"},{"id":"NIST-TEVV-06","sourcePages":"NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Agent / tool abuse testing","title":"Test agent tool misuse and unauthorized external actions"}],"publicationDate":"2026-08-07","reviewed_at":"2026-09-10","source_url":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.200-2.ipd.pdf","version":"NIST AI 200-2 ipd (Initial Public Draft), August 2026"},"id":"std:nist-ai-tevv-athlon","mapUrl":"https://controlsmap.com/?v=1&node=std%3Anist-ai-tevv-athlon","sourceIds":["nist-ai-tevv-athlon"],"sourceUrl":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.200-2.ipd.pdf","title":"NIST TEVV-Athlon (draft, Aug 2026)","type":"standard"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4296d1258fe3df2deae971269b20e41f48b5c528908d5824ead595af42e7bd26","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-01-72145876.json","sourceId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-01","targetDetailPath":"/data/v1/records/std-nist-ai-tevv-athlon-c008775c.json","targetId":"std:nist-ai-tevv-athlon","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6f3f01502f553d7a1f49c50b5c90c0713d99bf34c2b3d26c3c982dcf51c927d5","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-05-f9e22b30.json","sourceId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-05","targetDetailPath":"/data/v1/records/std-nist-ai-tevv-athlon-c008775c.json","targetId":"std:nist-ai-tevv-athlon","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7839f0f6509978e297122f87fd02a5d5b56a4672ccf7e32b1cad6e3c6df3d1d3","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-04-14e991d6.json","sourceId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-04","targetDetailPath":"/data/v1/records/std-nist-ai-tevv-athlon-c008775c.json","targetId":"std:nist-ai-tevv-athlon","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:83182948cd2eca1f0384caf3c20d57da97d91af088e16254cae55740f5107918","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-06-6a69659d.json","sourceId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-06","targetDetailPath":"/data/v1/records/std-nist-ai-tevv-athlon-c008775c.json","targetId":"std:nist-ai-tevv-athlon","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dac1ee58faab32d652d0827247260f7a77b62b41642a16209485a1332b754a49","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-02-41057f6e.json","sourceId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-02","targetDetailPath":"/data/v1/records/std-nist-ai-tevv-athlon-c008775c.json","targetId":"std:nist-ai-tevv-athlon","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fa7254ff9326e1d8b51098cf652361ac2c4db07ce12773b31a621554bedccbf1","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-03-37642a3d.json","sourceId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-03","targetDetailPath":"/data/v1/records/std-nist-ai-tevv-athlon-c008775c.json","targetId":"std:nist-ai-tevv-athlon","type":"belongs_to"}],"schemaVersion":1}