Governance and accountability

Governance evidence

What agencies reported about the OMB M-25-21 minimum practices for high-impact AI. This is a disclosure analysis, not an audit, a compliance finding or an official assessment. An unanswered question is missing evidence, not evidence that a safeguard is absent.

Governance report

Practice-by-practice evidence

Denominator: 38 records · deployed high-impact use cases

Reported in placeReported in progressNot applicablePrecluded by law or guidanceOther or ambiguous answer

Pre-deployment testing

Pre-deployment testing
Reported in place: 32 (84.2%)Pre-deployment testing
Reported in progress: 6 (15.8%)

AI impact assessment

AI impact assessment
Reported in place: 26 (68.4%)AI impact assessment
Reported in progress: 12 (31.6%)

Independent review

Independent review
Reported in place: 26 (68.4%)Independent review
Reported in progress: 12 (31.6%)

Ongoing monitoring

Ongoing monitoring
Reported in place: 28 (73.7%)Ongoing monitoring
Reported in progress: 10 (26.3%)

Operator training

Operator training
Reported in place: 28 (73.7%)Operator training
Reported in progress: 8 (21.1%)Operator training
Other or ambiguous answer: 2 (5.3%)

Fail-safe

Fail-safe
Reported in place: 23 (60.5%)Fail-safe
Reported in progress: 8 (21.1%)Fail-safe
Not applicable: 7 (18.4%)

Appeal process

Appeal process
Reported in place: 10 (26.3%)Appeal process
Reported in progress: 5 (13.2%)Appeal process
Not applicable: 20 (52.6%)Appeal process
Precluded by law or guidance: 3 (7.9%)

User and public consultation

User and public consultation
Reported in place: 18 (47.4%)User and public consultation
Reported in progress: 7 (18.4%)User and public consultation
Other or ambiguous answer: 13 (34.2%)

Practice	In scope	In place	In progress	N/A	Precluded or waived	Other	Answered	In place of applicable
Pre-deployment testing	38	32	6	0	0	0	100%	84% of 38
AI impact assessment	38	26	12	0	0	0	100%	68% of 38
Independent review	38	26	12	0	0	0	100%	68% of 38
Ongoing monitoring	38	28	10	0	0	0	100%	74% of 38
Operator training	38	28	8	0	0	2	100%	74% of 38
Fail-safe	38	23	8	7	0	0	100%	74% of 31
Appeal process	38	10	5	20	3	0	100%	67% of 15
User and public consultation	38	18	7	0	0	13	100%	47% of 38

Answered = records with any answer ÷ records in scope. In place of applicable = reported in place ÷ (in scope minus not applicable, precluded and waived). Unanswered records stay in that denominator, so the rate is a lower bound on reported evidence, not an estimate of real practice.

Agency-by-safeguard heatmap

Cell: share reported in place, among applicable recordsIn place Answered

Agency by governance practice
	Testing	Impact assess.	Indep. review	Monitoring	Training	Fail-safe	Appeal	Consultation	n
DHS	84%	68%	68%	74%	74%	74%	67%	47%	38

Hatched cells: the agency answered nothing for that practice, so there is no evidence either way. Compare agencies with care: each agency is one reporting unit, and portfolios differ in size and type.

Records requiring further investigation

12 records with at least one practice unanswered or in progressOpen in explorer

Use case	Stage	Test	AIA	Review	Monitor	Train	Fail-safe	Appeal	Consult
Babel DHS · DHS-185	Deployed	Reported in place	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in place	Other or ambiguous answer
Passive Body Scanner DHS · DHS-2380	Deployed	Reported in place	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Other or ambiguous answer
CBP Translate DHS · DHS-2388	Deployed	Reported in place	Reported in progress	Reported in progress	Reported in progress	Reported in place	Not applicable	Not applicable	Reported in place
Open Source and Social Media Analysis DHS · DHS-2538	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Reported in place	Reported in progress
Cryptocurrency Analysis DHS · DHS-2561	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress
Traffic Jam DHS · DHS-2570	Deployed	Reported in place	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in place	Other or ambiguous answer
Mobile Fortify DHS · DHS-2731	Deployed	Reported in place	Reported in progress	Reported in progress	Reported in place	Reported in place	Reported in place	Not applicable	Reported in place
Consular Consolidated Database (CCD) Facial Recognition (FR) On Demand Report (VISA Only) DHS · DHS-365	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress
AI-Assisted Resume Screening Tool DHS · DHS-2556	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress
Mobile Fortify DHS · DHS-2577	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Other or ambiguous answer	Reported in progress	Reported in progress	Reported in progress
License Plate Capture and Analysis DHS · DHS-2666	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Other or ambiguous answer	Reported in progress	Reported in progress	Reported in progress
Verification Match Model DHS · DHS-2384	Deployed	Reported in place	Reported in progress	Reported in progress	Reported in place	Reported in progress	Reported in place	Reported in place	Reported in progress

Unanswered analytical questions

Generated from the data; for follow-up with agencies

12 high-impact use cases are reported as deployed while their AI impact assessment is reported in progress. Was deployment authorised before the assessment was complete?
21 high-impact use cases mark an appeal process as not applicable. On what basis was each individual outcome judged not contestable?
5 high-impact use cases report using PII but give no link to a Privacy Impact Assessment. Is a PIA published elsewhere?
2 governance answers are ambiguous (for example, an answer option from a different question). What did the agency intend?

These are questions the inventory raises but cannot answer. They are not findings of non-compliance.