{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-20","description":"Filter and shape every AI output before release: block or transform content that matches the system's harmful-output taxonomy, keep responses within the declared scope and capabilities, detect agent-specific high-risk outputs and route them to defined responses by severity, ground factual claims in cited sources and verify them to limit hallucination, withhold system prompts, internal data, and other over-exposed information, and sanitize outputs consumed by downstream systems so they cannot carry executable or injected payloads. Measure filter effectiveness and retain configurations, block logs, and review samples as evidence.","details":{"control_category":"technical","control_type":"preventive","domain":"AI Governance","guidance":[{"propositionId":"NIST-TEVV-04","propositionTitle":"Test for disclosure of confidential information","source":"nist-ai-tevv-athlon","sourcePages":"NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Confidentiality attacks","sourceTitle":"NIST AI 200-2: TEVV-Athlon Framework for Evaluating AI Systems"}],"members":[{"control_id":"B009","coverage":"full","framework":"aiuc-1","relationship":"superset_of"},{"control_id":"C003","coverage":"full","framework":"aiuc-1","relationship":"superset_of"},{"control_id":"C004","coverage":"full","framework":"aiuc-1","relationship":"superset_of"},{"control_id":"C005","coverage":"full","framework":"aiuc-1","relationship":"superset_of"},{"control_id":"C006","coverage":"full","framework":"aiuc-1","relationship":"superset_of"},{"control_id":"D001","coverage":"full","framework":"aiuc-1","relationship":"superset_of"}],"statement":"Filter and shape every AI output before release: block or transform content that matches the system's harmful-output taxonomy, keep responses within the declared scope and capabilities, detect agent-specific high-risk outputs and route them to defined responses by severity, ground factual claims in cited sources and verify them to limit hallucination, withhold system prompts, internal data, and other over-exposed information, and sanitize outputs consumed by downstream systems so they cannot carry executable or injected payloads. Measure filter effectiveness and retain configurations, block logs, and review samples as evidence.","title":"Prevent harmful, out-of-scope, hallucinated, and over-exposed AI outputs","unified_id":"UC-AI-20"},"id":"uc:UC-AI-20","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-20","sourceIds":["aiuc-1","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"UC-AI-20 — Prevent harmful, out-of-scope, hallucinated, and over-exposed AI outputs","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:39072dd0efefa1f444d07ada81efc34838545c8e8f7eda8cfa12398d99ff6d2c","properties":{"control_id":"C004","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-c004-04abe3a2.json","targetId":"ctrl:aiuc-1:C004","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:473af2d50f306aab40b8828eadf994d85cd90f7ea9a3d57744ad75835c3a65a2","properties":{"rationale":"Harmful-output categories typically include discriminatory content, so output filtering catches some biased responses.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/risk-ai-bias-discrimination-35faf209.json","targetId":"risk:ai-bias-discrimination","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:52232931104ab49996272de5de1afd101b88928ebffe7e073d310313461781d8","properties":{"rationale":"Grounding, citation, and verification of factual claims directly reduce hallucinated and unreliable outputs.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/risk-ai-inaccurate-unreliable-output-cf10c86e.json","targetId":"risk:ai-inaccurate-unreliable-output","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:57c6d5f9f689d4b775c54e6478619f06f9f30a396267a5a6616557893080ca21","properties":{"rationale":"Scope and harmful-content filters catch part of the misuse surface; the dedicated misuse refusal control is primary.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/risk-ai-catastrophic-cyber-misuse-6bced10d.json","targetId":"risk:ai-catastrophic-cyber-misuse","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:58858e6d493365797505b5dbbc04aef4191da40e2a28f8e44897a597242ed89d","properties":{},"sourceDetailPath":"/data/v1/records/wf-c66-26a4ed19.json","sourceId":"wf:C66","targetDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","targetId":"uc:UC-AI-20","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5e9fe98e20436285dbbe53d3d98987b9929e85b492bd2005665f0eee253e7ddd","properties":{"control_id":"D001","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-d001-628b833f.json","targetId":"ctrl:aiuc-1:D001","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:695a661debf1d01bc2c6b1c46e31d61e85681c83b74e69b2ec2d83d79eea7688","properties":{"control_id":"B009","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-b009-20336550.json","targetId":"ctrl:aiuc-1:B009","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8eb3debe22a1cd1a9a0b595fcb067c7a39e8cf10b0facc57828b0ea1ae64653e","properties":{"control_id":"C003","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-c003-5536e2c9.json","targetId":"ctrl:aiuc-1:C003","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9760a2e3d5658f20413ae22917956617b54802d25bc7c92bb08a1fde6a24e0e8","properties":{"control_id":"NIST-TEVV-04","coverage":"guidance","delta":null,"framework":"nist-ai-tevv-athlon","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"informs","sourcePages":"NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Confidentiality attacks","source_version":"NIST AI 200-2 ipd (Initial Public Draft), August 2026"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-04-14e991d6.json","targetId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-04","type":"informed_by"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a7243a2a96cdaa22a89eb369e3368bf870bd79c66828db85e1d0acf25d102418","properties":{"control_id":"C006","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-c006-d03e5b11.json","targetId":"ctrl:aiuc-1:C006","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b798358969420b3f109b3ffaa3cce3f890eb7e7ba87673c9c66c2fd5e2387db9","properties":{},"sourceDetailPath":"/data/v1/records/wf-c67-2d6bb2c2.json","sourceId":"wf:C67","targetDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","targetId":"uc:UC-AI-20","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c138c9085801d2898819eb46d92df7c34c2d349d2a6ff78019dc55e7cf412342","properties":{"rationale":"Output filtering against the harmful-output taxonomy is the last technical barrier before a harmful response reaches a person.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/risk-ai-safety-harm-to-people-d02cb500.json","targetId":"risk:ai-safety-harm-to-people","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c921d9e08714caa27374f11854a6e3e28cde766fdc4254661668170bdac45796","properties":{"control_id":"C005","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-c005-c8242756.json","targetId":"ctrl:aiuc-1:C005","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d8e98edb473b5d39c46ddf7c5ec273d5782f1e65f05be494aaa256fec9e38805","properties":{"rationale":"Withholding internal data and over-exposed content from outputs reduces personal-data leakage at the response boundary.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/risk-ai-privacy-leakage-9aa8d83c.json","targetId":"risk:ai-privacy-leakage","type":"mitigates"}],"schemaVersion":1}