Federal AI Intelligence
Menu
Snapshot · OMB 2025 inventory · processed Oct 11, 2026
Governance and accountability

Governance evidence

What agencies reported about the OMB M-25-21 minimum practices for high-impact AI. This is a disclosure analysis, not an audit, a compliance finding or an official assessment. An unanswered question is missing evidence, not evidence that a safeguard is absent.

Agency
Stage
High-impact
Topic1
AI type1
Sourcing
Vendor
Function
Start year

Only records with a parseable start date match a year filter.

AI type: Classical / predictive MLTopic: Cybersecurity

Practice-by-practice evidence

Denominator: 4 records · use cases that answered at least one practice question
Reported in placeReported in progressNot applicableNo answer reported
PracticeIn scopeIn placeIn progressNot in placeN/APrecluded or waivedOtherNo answerAnsweredIn place of applicable
Pre-deployment testing40400000100%0% of 4
AI impact assessment4030000175%0% of 4
Independent review4030000175%0% of 4
Ongoing monitoring4030000175%0% of 4
Operator training41300000100%25% of 4
Fail-safe43001000100%100% of 3
Appeal process40004000100%n/a of 0
User and public consultation41300000100%25% of 4

Answered = records with any answer ÷ records in scope. In place of applicable = reported in place ÷ (in scope minus not applicable, precluded and waived). Unanswered records stay in that denominator, so the rate is a lower bound on reported evidence, not an estimate of real practice.

Agency-by-safeguard heatmap

Cell: share reported in place, among applicable recordsIn placeAnswered
Agency by governance practice
TestingImpact assess.Indep. reviewMonitoringTrainingFail-safeAppealConsultationn
SBA0%0%0%0%0%100%0%0%3
DOE0%–––100%0%0%100%1

Hatched cells: the agency answered nothing for that practice, so there is no evidence either way. Compare agencies with care: each agency is one reporting unit, and portfolios differ in size and type.

Records requiring further investigation

4 records with at least one practice unanswered or in progressOpen in explorer
Use caseStageTestAIAReviewMonitorTrainFail-safeAppealConsult
Crickets
DOE · DOE-723
Pre-deploymentReported in progressNo answer reportedNo answer reportedNo answer reportedReported in placeNot applicableNot applicableReported in place
AI Resolution Notes Generation
SBA · SBA-36
Pre-deploymentReported in progressReported in progressReported in progressReported in progressReported in progressReported in placeNot applicableReported in progress
AI Vulnerability Ticket Deduplication
SBA · SBA-37
Pre-deploymentReported in progressReported in progressReported in progressReported in progressReported in progressReported in placeNot applicableReported in progress
AI Vulnerability Remediation Assistance
SBA · SBA-38
Pre-deploymentReported in progressReported in progressReported in progressReported in progressReported in progressReported in placeNot applicableReported in progress

Unanswered analytical questions

Generated from the data; for follow-up with agencies
  1. VA designated 4 use cases high-impact but answered none of the minimum-practice questions for any of them. Were the practices assessed, and where is that recorded?
  2. 3 governance answers are ambiguous (for example, an answer option from a different question). What did the agency intend?

These are questions the inventory raises but cannot answer. They are not findings of non-compliance.