T8-R5 in five minutes
The page names the corpus, the tools, the cap, and the approver.
It names the channels: voice, chat, message.
It says what is refused: missing facts, secrets, and undo-hard actions without a person.
It points at the golden set.
It is a learning page, not a company policy you can hand to a regulator as if it were adopted.
One page is enough because the capstone is small. A longer policy that nobody can test is worse than five rules you can fail.
Sources and go deeper
- NIST AI Risk Management Framework spec last checked 2026-10
- OWASP Top 10 for Large Language Model Applications community last checked 2026-10
- Large language model — Wikipedia wikipedia last checked 2026-10