Governance and accountability

Governance evidence

What agencies reported about the OMB M-25-21 minimum practices for high-impact AI. This is a disclosure analysis, not an audit, a compliance finding or an official assessment. An unanswered question is missing evidence, not evidence that a safeguard is absent.

Governance report

Practice-by-practice evidence

Denominator: 26 records · use cases designated high-impact

Reported in placeReported in progressNot applicablePrecluded by law or guidanceOther or ambiguous answerNo answer reported

Pre-deployment testing

Pre-deployment testing
Reported in place: 4 (15.4%)Pre-deployment testing
Reported in progress: 3 (11.5%)Pre-deployment testing
No answer reported: 19 (73.1%)

AI impact assessment

AI impact assessment
Reported in place: 3 (11.5%)AI impact assessment
Reported in progress: 4 (15.4%)AI impact assessment
No answer reported: 19 (73.1%)

Independent review

Independent review
Reported in place: 3 (11.5%)Independent review
Reported in progress: 4 (15.4%)Independent review
No answer reported: 19 (73.1%)

Ongoing monitoring

Ongoing monitoring
Reported in place: 4 (15.4%)Ongoing monitoring
Reported in progress: 3 (11.5%)Ongoing monitoring
No answer reported: 19 (73.1%)

Operator training

Operator training
Reported in place: 4 (15.4%)Operator training
Reported in progress: 3 (11.5%)Operator training
No answer reported: 19 (73.1%)

Fail-safe

Fail-safe
Reported in place: 3 (11.5%)Fail-safe
Reported in progress: 3 (11.5%)Fail-safe
Not applicable: 1 (3.8%)Fail-safe
No answer reported: 19 (73.1%)

Appeal process

Appeal process
Reported in progress: 3 (11.5%)Appeal process
Not applicable: 3 (11.5%)Appeal process
Precluded by law or guidance: 1 (3.8%)Appeal process
No answer reported: 19 (73.1%)

User and public consultation

User and public consultation
Reported in place: 1 (3.8%)User and public consultation
Reported in progress: 4 (15.4%)User and public consultation
Other or ambiguous answer: 2 (7.7%)User and public consultation
No answer reported: 19 (73.1%)

Practice	In scope	In place	In progress	N/A	Precluded or waived	Other	No answer	Answered	In place of applicable
Pre-deployment testing	26	4	3	0	0	0	19	27%	15% of 26
AI impact assessment	26	3	4	0	0	0	19	27%	12% of 26
Independent review	26	3	4	0	0	0	19	27%	12% of 26
Ongoing monitoring	26	4	3	0	0	0	19	27%	15% of 26
Operator training	26	4	3	0	0	0	19	27%	15% of 26
Fail-safe	26	3	3	1	0	0	19	27%	12% of 25
Appeal process	26	0	3	3	1	0	19	27%	0% of 22
User and public consultation	26	1	4	0	0	2	19	27%	4% of 26

Answered = records with any answer ÷ records in scope. In place of applicable = reported in place ÷ (in scope minus not applicable, precluded and waived). Unanswered records stay in that denominator, so the rate is a lower bound on reported evidence, not an estimate of real practice.

Agency-by-safeguard heatmap

Cell: share reported in place, among applicable recordsIn place Answered

Agency by governance practice
	Testing	Impact assess.	Indep. review	Monitoring	Training	Fail-safe	Appeal	Consultation	n
VA	–	–	–	–	–	–	–	–	13
DOJ	0%	0%	0%	0%	0%	0%	0%	0%	7
DHS	50%	50%	50%	50%	50%	50%	0%	25%	4
EPA	100%	0%	0%	100%	100%	0%	0%	0%	1
SSA	100%	100%	100%	100%	100%	100%	0%	0%	1

Hatched cells: the agency answered nothing for that practice, so there is no evidence either way. Compare agencies with care: each agency is one reporting unit, and portfolios differ in size and type.

Records requiring further investigation

23 records with at least one practice unanswered or in progressOpen in explorer

Use case	Stage	Test	AIA	Review	Monitor	Train	Fail-safe	Appeal	Consult
Financial and Cryptocurrency Analysis: Federal Partner DOJ · DOJ-0083	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress
Financial and Cryptocurrency Analysis: Commercial Solution DOJ · DOJ-0084	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress
Data Synthesis, Sentiment, Filtering, and Location Linking DOJ · DOJ-0121	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress
RCRA PA EPA · 78	Deployed	Reported in place	Reported in progress	Reported in progress	Reported in place	Reported in place	Not applicable	Not applicable	Reported in progress
Heuristic Behavior Analytics VA · VA-25-2537	Deployed	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
AIDOC BriefCase VA · VA-24-1803	Deployed	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
VA CART SYNTAX Risk Model VA · VA-24-5542	Deployed	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
VA CART Mortality Model VA · VA-24-5583	Deployed	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
VA CART Nephropathy Risk Model VA · VA-24-5624	Deployed	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
VA CART Bleeding Risk Model VA · VA-24-5788	Deployed	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
Smartphone Information Forensics Triage DHS · DHS-2705	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
AI Resume & ATS App DHS · DHS-2721	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
Narrative Analysis for Fusion Desktop DOJ · DOJ-0190	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
Narrative Analysis for DOJ MIS DOJ · DOJ-0191	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
AI-Enabled Workflow Automation DOJ · DOJ-0335	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
AI-driven Fraud Detection DOJ · DOJ-0339	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
AICES VA · VA-25-5578	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
Fall Prediction Tool VA · VA-24-5579	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
EEO Consultation and Guidance VA · VA-25-13	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
Deduplication in Record Management VA · VA-25-1430	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
VAHC CRM- Veteran Self-Service VA · VA-25-5693	Pre-deployment	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
Secure Access Service Edge (SASE) VA · VA-25-6479	Pilot	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported
ACS NSQIP Risk Score VA · VA-24-3492	Retired	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported

Unanswered analytical questions

Generated from the data; for follow-up with agencies

VA designated 13 use cases high-impact but answered none of the minimum-practice questions for any of them. Were the practices assessed, and where is that recorded?
4 high-impact use cases are reported as deployed while their AI impact assessment is reported in progress. Was deployment authorised before the assessment was complete?
3 high-impact use cases mark an appeal process as not applicable. On what basis was each individual outcome judged not contestable?
4 high-impact use cases report using PII but give no link to a Privacy Impact Assessment. Is a PIA published elsewhere?

These are questions the inventory raises but cannot answer. They are not findings of non-compliance.