model-risk-triagelisted

# Model Risk Triage ## Purpose Produce a structured triage of the legal, governance, and operational risk dimensions of a specific AI model or AI system. The output is a risk register with ownership assignments and recommended controls — not a legal opinion on whether the model may be deployed. It equips attorneys and governance reviewers with the structured information they need to make deployment decisions. This skill is model-level and technical in focus. It complements `ai-use-case-intake` (which covers the business use case) and `ai-vendor-terms-review` (which covers vendor contractual terms). ## Use When - Engineering, product, or legal teams need to assess a specific model before integration or deployment. - A governance committee requires a pre-deployment risk assessment for an AI model. - A model is being upgraded, retrained, or replaced and a delta risk assessment is needed. - An audit, incident, or regulatory inquiry requires documentation of what risk assessment was performed before deployment. - A user asks "what are the risks of using this model?" or "what do we need to have in place before we deploy this?" ## Required Inputs - **Model identification**: Name, version, provider or source (vendor API, open-source repository, internally trained), and a link to model documentation or model card if available. - **Intended use description**: How the organization plans to use the model — inputs, outputs, and the decision or action outputs will inform or automate