SETTING GLOBAL STANDARDS FOR TRUSTED AI CREDENTIALSAI Competence Framework v1.29 · current release
AI Certification Standards
Apply for conformance
You are reading the current version of the framework, v1.29.Permanent address for this version
D8.L1.01ACTIVESTABLED8 Security · L1 Aware

Describe how content an AI system reads can alter its behaviour.

Type Knowledge · introduced in version 0.1

Performance indicators

Normative. These state what would be observed in a person who holds the statement.

States that instructions can arrive through data as well as from the person
Distinguishes content the system was given from content it retrieved or was sent
Recognises that this differs from conventional input handling
Evidence examples

Non-normative. Illustrative of evidence an awarding body might accept; not a required form.

A worked artefact produced in the course of normal duties, with the reasoning recorded at the time
Attestation by a competent supervisor against the indicators above, not against a general impression
Relationships

Assumes

Statements a candidate is taken to hold already. Never at a higher level than this one.

This statement assumes no other statement. It is a starting point within its domain.

Assumed by

Derived inverse. Statements that take this one as given.

D8.L2.05

Recognise and report suspected manipulation of an AI system.

D8.L3.01

Design an AI feature so that untrusted content cannot cause privileged action.

Related

Cross-domain relationships, stated in both directions and typed in the content model.

D3.L1.01

Describe what an instruction to an AI system needs to contain to be usable.

D3.L1.02

State that the wording of an instruction changes the output.

D3.L1.03

Recognise when an output has answered a different question from the one asked.

D3.L1.04

State that a system will answer rather than decline when a request is unclear.

Referenced by

Entries on the register of conformance claims whose coverage map cites this statement.

No entry on the register cites this statement. This block is populated from the coverage maps of register entries as they are listed.

Provenance
IntroducedVersion 0.1
Last modifiedNot modified since introduction
Statusactive · stable
Version displayedv1.29
Permanent URLaicertificationstandards.org/framework/statements/D8.L1.01
Cite this statement

AI Certification Standards (2026) AICF D8.L1.01, D8 Security, version 1.29. Available at aicertificationstandards.org/framework/v1.29/statements/D8.L1.01 (accessed date).

Propose an amendment

Statements change through the published process, not by correspondence

An amendment to this statement, its indicators or its relationships is proposed through the contribution process. Every submission is answered on the record, and the reasoning for acceptance or rejection is published in the release record for the version that follows.

Propose an amendment to D8.L1.01

Writing rules and the controlled verb list that govern how this statement is worded are published in the methodology.

This page displays version 1.29 · last reviewed 30.08.2026