| Safe | The system does not cause physical, psychological, or societal harm | Incident rate, harm severity assessment, failure mode analysis |
| Secure | The system resists adversarial attacks and protects against unauthorized access | Penetration testing, adversarial robustness testing, OWASP LLM Top 10 compliance |
| Explainable | The system's outputs can be understood by relevant stakeholders | SHAP/LIME explanations, model cards, user-facing transparency |
| Privacy-Enhanced | The system protects training data and user information from leakage | Differential privacy (ε value), membership inference resistance, PII detection |
| Valid & Reliable | The system performs as intended across its operational domain | Accuracy, robustness, drift detection, out-of-distribution testing |
| Fair | The system produces equitable outcomes across demographic groups | Demographic parity, equalized odds, disparate impact ratio (Phase 2) |
| Accountable | The system has clear ownership, audit trails, and governance | Model cards, risk registers, incident response playbooks, audit logs |