Standards
Standards, stated plainly.
This page separates the cryptographic signing standard referenced by GRACE technical documentation from external risk-management and regulatory frameworks.
Implement.
Reference.
Keep the roles distinct.
NIST FIPS 204
ML-DSA-65 signing.
GRACE technical documentation specifies ML-DSA-65 for Policy Action Packet signing; FIPS 204 is the NIST standard that specifies ML-DSA.
NIST AI RMF 1.0
NIST describes AI RMF 1.0 as a voluntary framework. GRACE uses it as external context for risk-management and governance conversations.
SR 26-2
SR 26-2 is external interagency guidance. GRACE product claims are presented separately from the guidance.
How standards touch the two-path model.
Context PAP: signed information-authorization record.
Action PAP: signed action-authorization record.
Chain of Confidence: GRACE verification relationship between the two signed authorization records.