Appendix C: Templates and Tools
Every governance artefact this book recommends is listed here under the activity it supports. Each belongs in the governance repository, changed through reviewed pull requests; the named chapter shows a completed example.
Templates by governance activity
| Activity | Artefact | Where to find it |
|---|---|---|
| Orient | Usage-mode register | Chapter 2 |
| Orient | Declared intent and staff statement on AI tools | Chapter 1 |
| Orient | Principles with executable verifications and recorded exceptions | Chapter 4 |
| Intake | Intake record, legal mandate note and readiness scorecard | Chapter 5 |
| Sovereignty | Model-origin assessment, model-origin policy and exit plan | Chapter 6 |
| Procure | Vendor assessment, due-diligence questionnaire, clause checklist and exit plan | Chapter 7 |
| Classify | Risk-tiering questionnaire, classification policy, risk register, substantial-modification check and risk appetite | Chapter 8 |
| Govern | Governance, approval and acceptable-use policies, inventory entry and waiver record | Chapter 9 |
| Govern | AI Decision Record governance fields and forum review | Chapter 9, Chapter 13 |
| Assess impact | FRIA, fairness configuration, oversight design and plain-language notice | Chapter 10 |
| Assure | Evidence manifest, model and system cards, evidence pack and audit procedure | Chapter 11 |
| Assure | EU AI Act obligation mapping | Appendix A |
| Organise | Engagement charter, entity profile and shared-platform agreement | Chapter 12 |
| Decide | Decision tiers, forum terms of reference and decision record | Chapter 13 |
| Build competence | Role description, competence framework and learning path | Chapter 14 |
| Adopt | Champions charter, consultation commitments and adoption dashboard | Chapter 15 |
| Steer | Portfolio entry, benefits record and risk report to the management body | Chapter 16 |
| Steer | Investment and value record, consumption forecast, spend-stop record, option comparison and public appraisal summary | Chapter 16A |
| Be transparent | Algorithm register entry and FRIA summary for publication | Chapter 17 |
| Learn | Anti-pattern fitness functions and practice checklist | Chapter 20, Chapter 21 |
| Look ahead | Horizon register | Chapter 22 |
| Assess maturity | Maturity model and self-assessment template | Appendix B |
| Assess maturity | UNESCO Readiness Assessment Methodology (30, UNESCO, 2023) and Ethical Impact Assessment (31, UNESCO, n.d.) | Chapter 5, Chapter 10 |
Technical templates
The governance artefacts depend on engineering templates that this book does not collect, such as data contracts, evaluation suites and agent permission manifests; stable identifiers let both live in one repository.
Repository tools
| Tool | Purpose |
|---|---|
scripts/check_mermaid_diagrams.py |
Verifies that rendered diagrams match their Mermaid sources |
scripts/audit_references.py |
Audits inline citations against 30_references.md |
scripts/verify_sources.py |
Verifies cited URLs and ISBNs |
scripts/check_doc_numbering.py |
Checks chapter numbering |
tests/ |
Pytest suites for completeness, consistency, clarity and reference integrity |
Relationship to the other volumes in the series
AI Governance is the second book in the Transformed Architecture. The first, Architecture as Code (66, Nordqvist, 2025), supplies the general templates on which these build: its Control Mapping Matrix has its AI counterpart in Appendix A, and its maturity model its counterpart in Appendix B.
Sources
- UNESCO (2023). Readiness Assessment Methodology: A Tool of the Recommendation on the Ethics of Artificial Intelligence. UNESCO. (30, UNESCO, 2023)
- UNESCO. Ethical Impact Assessment: A Tool of the Recommendation on the Ethics of Artificial Intelligence. UNESCO Global AI Ethics and Governance Observatory. (31, UNESCO, n.d.)
- Nordqvist, G. (2025). Architecture as Code. The Transformed Architecture, Book 1. aac.geon.se. (66, Nordqvist, 2025)