The editable Markdown in this repository is the source for the published narrative and guides. The website renders those sources. The PNGs depict their visual contracts; the presentation provides a guided teaching sequence with source-linked notes.
This source map serves AISG-INTENT-001, the governing intent for our canonical AI Security & Governance package. The project guide connects direction, work state and evidence; this file owns the mapping from subject to maintained source.
| Subject | Source |
|---|---|
| Security and governance definitions, shared story and connections | AI Security and Governance overview |
| Protecting business AI | Secure business AI |
| Defending against attacker use of AI | Defend against AI |
| Using AI in security operations | Defend with AI |
| Directing and overseeing AI use | AI Governance |
| Applying Secure Business AI across an effort | Application companion and detailed guide |
| Walking a CISO through Stage 0 and the Stage 1 handoff | CISO walkthrough, with fuller rationale in the starter-playbook exploration |
| Detailed explanations | Guide index |
| Public evidence and its limits | Sources |
| Writing, visual conventions and checks | Authoring standard |
| Reusable document structure | Architecture template |
| Unresolved design questions | Review status |
| Accepted project directions | Decision log |
| Project intent, roadmap and current work | Project guide |
| Future downstream adaptations | Downstream use contract and register |
| Questions and candidate evolution | Exploration guidance |
Human and agent authors should read this map, the authoring standard and the relevant canonical architecture before making changes. Revise source meaning before updating an image or presentation. Preserve proposal status, source dates and review limitations. A generated image or successful build does not establish security effectiveness.
The application companion is derived from its two canonical Markdown sources into one overview PNG and one detailed PDF. It applies architecture 01 and governance 04 without changing either source's meaning. It is outside the existing presentation; the deck remains a teaching sequence for the three security views and governance companion.
The CISO walkthrough is a meeting view derived from its canonical Markdown. Its six conversation stops are different from the six project stages: it gives practical treatment to Stage 0 and the Stage 1 handoff, then points to the existing application guide for later stages. Its blank template downloads are generated from the same source during the site build.
The public sources were prepared from the original discussion drafts and the current authorized governance synthesis. An earlier internal orientation was permitted as a conceptual comparison and adaptation source for the governance and introductory refinements; non-public organizational material was excluded. Public primary sources support current claims. Local production notes and operational review receipts were omitted; architecture content and limitations were retained. The publication provenance record preserves the initial edition; the release manifest records the current source and artifact hashes. No global agent configuration is required to read or use these documents.