Episode 043: What NIST AI RMF 1.0 actually demands — and what it doesn't
What NIST AI RMF 1.0 Actually Demands — And What It Doesn't Three and a half years after publication, the NIST AI Risk Management Framework has become the closest thing the United States has to a national AI governance baseline — referenced in federal procurement, mapped against the EU AI Act, woven into every hyperscaler's compliance posture. This deep dive reads the document honestly against what it has actually become: surprisingly concrete in what it demands of organizations, conspicuously silent on the systems it was never designed for, contested from civil society on one flank and frontier-safety researchers on the other, and quietly reshaped by an institutional reorganization that has removed the word safety from the name above the door. ...