APRF Profile Assessment

Profile

Core is the Tier 2 production minimum. Regulated adds Tier‑3-only mandatories for mission-critical or regulated systems.

• Core (Tier 2 Production)40 gates · Tier 2 · Minimum mandatory gates for customer- or partner-facing AI. Pass this gate before claiming production readiness. Tier 3 and regulated systems must still assess the Regulated profile or full catalog.
• Regulated (Tier 3)61 gates · Tier 3 · Core Profile plus Tier-3-only mandatories for mission-critical or regulated AI (residency/DPIA, fairness, dual control, signed supply chain, chaos/continuity, independent assessment). Target capability Level 5.

Optional lenses

Add system-type gates on top of the selected profile. Coding agents is available when you run agentic IDE or repo tools.

• RAG+8 gates beyond profile · Retrieval-augmented generation: corpus ownership, context labeling, memory isolation, and retrieval-quality gates.
• Agents+6 gates beyond profile · Autonomous and tool-using agents: charters, step budgets, tool mediation, human gates, and kill switches.
• Voice+2 gates beyond profile · Voice and telephony AI: session identity, privacy of recordings, latency SLOs, safety, and escalation paths.
• Coding agents+15 gates beyond profile · IDE and repo-connected coding agents: sandboxing, secret hygiene, tool allowlists, supply chain, and human gates for destructive changes.