Collect
Bring standards, protocols, research, implementation practices, and evidence into one navigable map.
Ecosystem & Standards
A commons where standards meet.
Governance Commons collects, contextualizes, connects, teaches, warns, and contributes across the wider governance ecosystem. GC is maintainer-led and does not claim authority over the standards it documents.
Contextualize
Record source, version, date, scope, lifecycle, overlap, differences, and uncertainty.
Connect
Crosswalk related work without treating different standards or authorities as interchangeable.
Working relationships
Different kinds of relationship, explicitly named.
GC may reference, align with, interoperate with, crosswalk, adopt, contribute to, research, warn about, or distinguish external work. These labels describe relationships; they do not grant authority.
Standards & protocols
NIST, ISO/IEC, W3C, IETF, IEEE, OASIS, AAIF, AGF/AAP, MCP, A2A, and related work can be documented by scope and version.
Identity & provenance
Credentials, decentralized identifiers, content provenance, attestations, and related evidence systems can be connected to governed-event records.
Observability & security
Telemetry, traceability, agent security, risk-management, and assurance practices can provide evidence without becoming GC authority.
Explore organizations
Explore source-linked ecosystem profiles.
These entries explain what each organization offers and where its work may intersect with GC. Detailed verified crosswalks are still in preparation.
Intergovernmental policy organization
OECD
AI Principles and international AI policy research.
Conceptual comparison of transparency, accountability and human oversight; no endorsement or implementation claim.
Explore profile →US government standards and measurement institute
NIST
AI Risk Management Framework and related guidance.
Compare governance evidence and risk-management documentation; GC records do not establish AI RMF compliance.
Explore profile →International standards organizations
ISO/IEC
International AI standards, including management-system and risk-management work.
Explore overlap in governance records and controls; no certification or standards equivalence is claimed.
Explore profile →Open-source ecosystem initiative
Agentic AI Foundation (AAIF)
Open collaboration on agentic AI infrastructure and interoperability.
Investigate interoperability and governance boundaries for agent systems; no affiliation claimed.
Explore profile →Web standards consortium
W3C
Web standards including Verifiable Credentials and identity-related specifications.
Potential intersections with identity, claims and provenance; no demonstrated GC integration implied.
Explore profile →Open interoperability protocol
Model Context Protocol (MCP)
Protocol for connecting AI applications with external tools, data sources and contextual resources.
GC can describe authorization and evidence surrounding tool access; no native integration or formal mapping is claimed.
Explore profile →Agent interoperability protocol
Agent2Agent (A2A)
Open protocol for communication and collaboration among agents built with different systems.
GC delegation and authority boundaries may complement A2A communication; conformance or interoperability is not established.
Explore profile →Open security research initiative
OWASP Agentic Security Initiative
Research, guidance and threat models addressing security risks in autonomous and agentic AI applications.
Security threat analysis can inform GC governance questions; security controls and governance records are not interchangeable.
Explore profile →Content provenance standards initiative
C2PA
Specifications for cryptographically verifiable provenance of digital media and content credentials.
Content provenance can complement governed-action evidence, but does not itself establish agent authorization.
Explore profile →Open observability framework
OpenTelemetry
Vendor-neutral instrumentation and collection of traces, metrics and logs.
Operational traces can support evidence gathering; telemetry alone does not prove delegated authority or policy compliance.
Explore profile →Next profiles under preparation: IEEE, EU AI Act, IETF, OASIS, and other relevant standards bodies. Explore the proposed AI Systems Observatory →
GC's role
Common ground, not a competing authority.
External organizations retain authority over their own standards. GC's role is to make relevant work easier to find, understand, compare, verify, and apply while preserving provenance and uncertainty.
Core rule: No stage may silently impersonate the authority of another.