Changelog — AI Safety Pack

v1.0 (2026-02-24)

Initial deliverable-grade release.

AI use policy (01-ai-use-policy.md) with clear default prohibitions for high-impact people decisions and Restricted data handling.
Executive 1-pager of approved vs prohibited use-cases (02-approved-prohibited-usecases.md).
Intake/approval matrix (02a-ai-use-case-matrix.md) with default status rules, minimum controls, and evidence artifacts.
People-harm risk register template (03-people-harm-risk-register.md) with starter scenarios.
Controls map (04-controls-map.md) with control IDs, owners, implementation notes, and evidence artifacts.
30-day implementation checklist (05-30-day-implementation-checklist.md).
Training deck outline (06-training-deck-outline.md).
Operating templates: use-case register, use-case cards, and Exception Decision Record (EDR).

Control ID consistency sweep across docs (README ↔ controls ↔ matrix ↔ risk register ↔ QA docs/templates).
QA scenarios and recorded results for scenarios A/B/C (10-qa-scenarios.md, 11-qa-results-scenario-a-b.md, 12-qa-results-scenario-c.md).

Guidance is written to be jurisdiction-neutral and operational; it is not legal advice.

Deployment accelerators and example assets (build block).

00-quick-start-guide.md — 48-hour emergency deployment guide with interim directive template and week 1 validation checklist.
02b-decision-tree.md — ASCII decision tree for rapid use-case classification with 5-minute quick questions and common patterns.
13-communication-templates.md — 7 rollout templates: executive announcement, manager briefing, training invitation, incident response, near-miss kudos, exception announcement, quarterly update.
use-cases/example-hr-screening-prohibited.md — Complete example of Prohibited classification (D3/C2) with alternative approaches.
use-cases/example-engineering-copilot-conditional.md — Complete example of Conditional classification with full control implementation.

Operational usability improvements (build block).

04a-controls-quick-reference.md — One-page control lookup with owners, evidence requirements, and quick bundles for common scenarios.
06a-training-facilitator-guide.md — Facilitator preparation guide with slide-by-slide tips, difficult question responses, and role-specific module guidance.
09-jurisdiction-notes.md — Multi-jurisdictional adaptation guidance covering EU AI Act, US sector-specific rules, UK GDPR/ICO, Saudi Arabia PDPL/SDAIA, Singapore PDPA/IMDA, and Australia Privacy Act/APRA.