Framework lens
NIST AI RMF — documentation support
Organise your agent evidence by the four NIST AI RMF functions — Govern, Map, Measure, and Manage.
Organise your agent evidence by the four NIST AI RMF functions — Govern, Map, Measure, and Manage.
Why it matters
The NIST AI RMF is a widely used, voluntary structure for organising AI risk work. Using it as a lens gives a familiar function-based view of what is documented and where the gaps are, without adopting a whole programme at once.
What good looks like
The same evidence, controls, and tests you have already captured, viewed by RMF function — Govern, Map, Measure, Manage — as a direct mapping that shows documentation and evidence coverage per function and what is missing. It reuses the same evidence register and control checklist: the RMF is a way of looking, not a second data model to keep in sync.
What can go wrong
The RMF becomes a separate spreadsheet that drifts from the real evidence. Coverage is mistaken for conformance. A 'NIST-approved' claim appears, even though NIST does not certify and the RMF is voluntary guidance.
What AgentProof checks
AgentProof maps coverage by the four functions using the one lens engine, with the mappings direct and pinned to a named framework version. It reports documentation and evidence coverage — never a conformance score and never a claim of NIST certification.
Key terms
The exact vocabulary this part of the record uses — grounded in the shipped product model.
- RMF functions
- Govern, Map, Measure, Manage.
- Direct mapping
- The same evidence and controls, viewed by function — not a second data model.
- Coverage output
- Documentation and evidence coverage per function plus an applicability read.
- Framework version
- The NIST AI RMF seed is pinned to a named framework version.
Keep reading
Build this record for your own agents
AgentProof turns each part of this into one documented, evidence-backed record — before your compliance review.
Ready to build a compliance-readiness record for your own agent?
Request a compliance readiness pilot to apply this guidance to a real agent.
AgentProof builds a compliance-readiness record, not an official audit, and it does not speak on behalf of any vendor.