Intelligent Enterprise Engineering Doha · Riyadh · Amman
Framework · AIIX-SPEC 5.5.1

The four governance lanes — how readiness becomes a public certificate.

AIIX-SPEC 5.5.1 replaces one-size assessment with four lanes, three public claim states, and a certificate that stays honest between audits. Here is the model — and how to choose your lane.

4governance lanes3public claim states90day conditional path14domains · 42 sub-dimensions
01

One assessment never fitted every organisation.

A nine-person startup and a national bank do not need the same appraisal — but they do need the same honesty. AIIX-SPEC 5.5.1 resolves this with four governance lanes: the depth of assessment scales to the organisation and the public claim it wants to make, while the caps, floors and evidence rules never bend.

Every lane draws on the same 14 domains, 42 sub-dimensions, 71 evidence templates and 47 certification conditions. What changes is instrument depth, independent appraisal, and what you may say in public.

02

The four lanes.

F
Foundation / Fast
A 48-question internal readiness diagnostic and cap scan. No public certificate — a private baseline and roadmap.
F-P
Foundation Public
60–70 questions with a limited independent appraisal. Yields a public Foundation Verified certificate for eligible micro, startup and SME scopes.
S
Standard
An 84-question full organisation assessment. Public Active certificate at L4 with a licensed-assessor appraisal.
X
Extended Assurance
115 questions with sampling and corroboration — the highest bar, for enterprise, government, regulated and public-impact scopes.
03

Three public claim states.

What an organisation may publicly claim is a normative state, not a marketing choice:

Foundation Verified
Lane F-P only. Limited foundation-level public assurance for a low-risk scope — never presented as Active or Optimised.
Active
Lane S or X at L4: evidence appraised, no blocking caps, critical floors passed.
Optimised
L5 (score ≥ 85) with a continuous-improvement diamond D12 ≥ 70 and runtime-attested evidence.

Live certificate status moves through Green · Watch · At-Risk · Suspended · Withdrawn as the evidence does — verifiable at binnovy.com/aiix/verify.

04

The 90-day conditional path.

A high average never certifies alone, but a bounded, named gap need not block an otherwise-ready organisation. Obstacles sort into three classes:

Class B — hard block
Integrity or safety failures. The certificate cannot issue.
Class C — condition
A bounded, evidence-pathed gap. The certificate issues with a public “Conditions Open” qualifier, due within 90 days.
Class W — watch
An improvement item with no claim effect.

A condition overdue moves the certificate At-Risk; unresolved 30 days later, Suspended. Anything not in the exhaustive Class-C catalogue is Class B — D9, the assurance spine, is never conditionable.

05

Continuously verified — not annually audited.

Between appraisals the certificate stays honest through a lightweight heartbeat — quarterly for Foundation Public and Standard, monthly for Extended Assurance and Optimised — and a public verifier synced from the runtime, never edited by hand.

AI incidents are not a footnote. The incident register captures every violation with computed impact, risk and corrective actions; open high-severity incidents block a new claim, and every open item is carried into the next review until closure evidence is accepted. Miss the drill or leave a corrective action overdue, and the status moves before anyone files a complaint.

06

Choosing your lane.

1
Start with the claim
No public claim → Lane F. A limited SME claim → F-P. Buyer-facing Active → S. Government or regulated → X.
2
Let risk escalate it
Sensitive data, high-impact use or public reliance can only raise the lane, never lower it.
3
Reuse the evidence
Foundation evidence carries forward — the ladder from readiness to Active is a path, not a restart.